[Resource Topic] 2018/850: Computing supersingular isogenies on Kummer surfaces

Welcome to the resource topic for 2018/850

Computing supersingular isogenies on Kummer surfaces

Authors: Craig Costello


We apply Scholten’s construction to give explicit isogenies between the Weil restriction of supersingular Montgomery curves with full rational 2-torsion over GF(p^2) and corresponding abelian surfaces over GF(p). Subsequently, we show that isogeny-based public key cryptography can exploit the fast Kummer surface arithmetic that arises from the theory of theta functions. In particular, we show that chains of 2-isogenies between elliptic curves can instead be computed as chains of Richelot (2,2)-isogenies between Kummer surfaces. This gives rise to new possibilities for efficient supersingular isogeny-based cryptography.

ePrint: https://eprint.iacr.org/2018/850

Slides: https://asiacrypt.iacr.org/2018/files/SLIDES/THURSDAY/P512/1045-1200/ASIACRYPT 2018 talk.pdf

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .