CSIDH: An Efficient Post-Quantum Commutative Group Action

Wouter Castryck; Tanja Lange; Chloe Martindale; Lorenz Panny; Joost Renes

doi:10.1007/978-3-030-03332-3_15

CSIDH: An Efficient Post-Quantum Commutative Group Action

Wouter Castryck
, Tanja Lange
, Chloe Martindale
, Lorenz Panny
, Joost Renes

Research output: Chapter in Book/Report/Conference proceeding › Conference Contribution (Conference Proceeding)

332 Citations (Scopus)

Abstract

We propose an efficient commutative group action suitable
for non-interactive key exchange in a post-quantum setting. Our construction
follows the layout of the Couveignes–Rostovtsev–Stolbunov
cryptosystem, but we apply it to supersingular elliptic curves defined
over a large prime field Fp, rather than to ordinary elliptic curves. The
Diffie–Hellman scheme resulting from the group action allows for publickey
validation at very little cost, runs reasonably fast in practice, and
has public keys of only 64 bytes at a conjectured AES-128 security level,
matching NIST’s post-quantum security category I.

Original language	English
Title of host publication	Advances in Cryptology - ASIACRYPT 2018
Publisher	Springer
Pages	395-427
ISBN (Electronic)	978-3-030-03332-3
ISBN (Print)	978-3-030-03331-6
DOIs	https://doi.org/10.1007/978-3-030-03332-3_15
Publication status	E-pub ahead of print - 26 Oct 2018

Publication series

Name	Lecture Notes in Computer Science
Volume	11274
ISSN (Electronic)	1611-3349

Access to Document

10.1007/978-3-030-03332-3_15

Handle.net

Persistent link

Dr Chloe Martindale
- chloe.martindalebristol.acuk
- School of Computer Science - Senior Lecturer
Person: Academic

Cite this

@inproceedings{c148fd5cab284cb593767023547bc78b,

title = "CSIDH: An Efficient Post-Quantum Commutative Group Action",

abstract = "We propose an efficient commutative group action suitable for non-interactive key exchange in a post-quantum setting. Our construction follows the layout of the Couveignes–Rostovtsev–Stolbunov cryptosystem, but we apply it to supersingular elliptic curves defined over a large prime field Fp, rather than to ordinary elliptic curves. The Diffie–Hellman scheme resulting from the group action allows for publickey validation at very little cost, runs reasonably fast in practice, and has public keys of only 64 bytes at a conjectured AES-128 security level, matching NIST{\textquoteright}s post-quantum security category I.",

author = "Wouter Castryck and Tanja Lange and Chloe Martindale and Lorenz Panny and Joost Renes",

year = "2018",

month = oct,

day = "26",

doi = "10.1007/978-3-030-03332-3\_15",

language = "English",

isbn = "978-3-030-03331-6",

series = "Lecture Notes in Computer Science",

publisher = "Springer",

pages = "395--427",

booktitle = "Advances in Cryptology - ASIACRYPT 2018",

address = "United States",

}

TY - GEN

T1 - CSIDH

T2 - An Efficient Post-Quantum Commutative Group Action

AU - Castryck, Wouter

AU - Lange, Tanja

AU - Martindale, Chloe

AU - Panny, Lorenz

AU - Renes, Joost

PY - 2018/10/26

Y1 - 2018/10/26

N2 - We propose an efficient commutative group action suitable for non-interactive key exchange in a post-quantum setting. Our construction follows the layout of the Couveignes–Rostovtsev–Stolbunov cryptosystem, but we apply it to supersingular elliptic curves defined over a large prime field Fp, rather than to ordinary elliptic curves. The Diffie–Hellman scheme resulting from the group action allows for publickey validation at very little cost, runs reasonably fast in practice, and has public keys of only 64 bytes at a conjectured AES-128 security level, matching NIST’s post-quantum security category I.

AB - We propose an efficient commutative group action suitable for non-interactive key exchange in a post-quantum setting. Our construction follows the layout of the Couveignes–Rostovtsev–Stolbunov cryptosystem, but we apply it to supersingular elliptic curves defined over a large prime field Fp, rather than to ordinary elliptic curves. The Diffie–Hellman scheme resulting from the group action allows for publickey validation at very little cost, runs reasonably fast in practice, and has public keys of only 64 bytes at a conjectured AES-128 security level, matching NIST’s post-quantum security category I.

U2 - 10.1007/978-3-030-03332-3_15

DO - 10.1007/978-3-030-03332-3_15

M3 - Conference Contribution (Conference Proceeding)

SN - 978-3-030-03331-6

T3 - Lecture Notes in Computer Science

SP - 395

EP - 427

BT - Advances in Cryptology - ASIACRYPT 2018

PB - Springer

ER -

CSIDH: An Efficient Post-Quantum Commutative Group Action

Abstract

Publication series

Access to Document

Handle.net

Fingerprint

Profiles

Dr Chloe Martindale

Cite this