Quantum Circuits for the CSIDH: Optimizing Quantum Evaluation of Isogenies
Quantum Circuits for the CSIDH: Optimizing Quantum Evaluation of Isogenies
Choosing safe post-quantum parameters for the new CSIDH isogeny-based key-exchange system requires concrete analysis of the cost of quantum attacks. The two main contributions to attack cost are the number of queries in hidden-shift algorithms and the cost of each query. This paper analyzes algorithms for each query, introducing several new speedups while showing that some previous claims were too optimistic for the attacker. This paper includes a full computer-verified simulation of its main algorithm down to the bit-operation level.
- University of Bristol United Kingdom
- University of Chicago United States
- University of Illinois at Chicago United States
- Eindhoven University of Technology Netherlands
- Technical University Eindhoven Netherlands
Cryptanalysis, Circuits, Isogenies, Quantum computation, Elliptic curves, Reversible computation, Constant-time computation, 004
Cryptanalysis, Circuits, Isogenies, Quantum computation, Elliptic curves, Reversible computation, Constant-time computation, 004
selected citations These citations are derived from selected sources.This is an alternative to the "Influence" indicator, which also reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).43 popularity This indicator reflects the "current" impact/attention (the "hype") of an article in the research community at large, based on the underlying citation network.Top 10% influence This indicator reflects the overall/total impact of an article in the research community at large, based on the underlying citation network (diachronically).Top 10% impulse This indicator reflects the initial momentum of an article directly after its publication, based on the underlying citation network.Top 10%
Citations provided by BIP!Popularity provided by BIP!