Lune

CRYPTO2024Top-tier venue

Radical \rootN\ofeˊlu\root N \of {\mathrm {\acute{e}lu}} Isogeny Formulae

Thomas Decru

2024Year
4Citations
1Top-tier citations

Abstract

We provide explicit radical N -isogeny formulae for all odd integers N . The formulae are compact closed-form expressions which require one N th root computation and O(N ) basic field operations. The formulae are highly efficient to compute a long chain of N -isogenies, and have the potential to be extremely beneficial for speeding up certain cryptographic protocols such as CSIDH. Unfortunately, the formulae are conjectured, but we provide ample supporting evidence which strongly suggests their correctness. For CSIDH-512, we notice an additional 35% speed-up when using radical isogenies up to N = 199, compared to the work by Castryck, Decru, Houben and Vercauteren, which uses radical isogenies up to N = 19 only. The addition of our radical isogenies also speeds up the computation of larger class group actions in a comparable fashion.

Ask about this paper

Your agent reads all of it.

Lune indexed this paper to the last equation, along with the top-tier papers that cite it. Ask a question and the answer quotes them.

Questions to start from

Your agent calls

Luneget_paper_fulltext

Ask in Lune

Free to start. No credit card required.

Cited by top-tier papers1

Ask how each one uses it

Builds on5

Related papers

Dusk over the sea between two cliffs drawn in fine vertical lines