The parametrization of (3, 3)-isogenies by Bruin, Flynn and Testa requires over 37.500 multiplications if one wants to evaluate a single isogeny in a point. We simplify their formulae and reduce the amount of required multiplications by 94 %. Further we deduce explicit formulae for evaluating (3, 3)-splitting and gluing maps in the framework of the parametrization by Bröker, Howe, Lauter and Stevenhagen. We provide implementations to compute (3 n, 3 n) -isogenies between principally polarized abelian surfaces with a focus on cryptographic application. Our implementation can retrieve Alice’s secret isogeny in 11 s for the SIKEp751 parameters, which were aimed at NIST level 5 security.
CITATION STYLE
Decru, T., & Kunzweiler, S. (2023). Efficient Computation of (3 n, 3 n) -Isogenies. In Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) (Vol. 14064 LNCS, pp. 53–78). Springer Science and Business Media Deutschland GmbH. https://doi.org/10.1007/978-3-031-37679-5_3
Mendeley helps you to discover research relevant for your work.