Cryptology ePrint Archive: Report 2018/1215

New Hybrid Method for Isogeny-based Cryptosystems using Edwards Curves

Suhri Kim and Kisoon Yoon and Jihoon Kwon and Young-Ho Park and Seokhie Hong

Abstract: Along with the resistance against quantum computers, isogeny-based cryptography offers attractive cryptosystems due to small key sizes and compatibility with the current elliptic curve primitives. While the state-of-the-art implementation uses Montgomery curves, which facilitates efficient elliptic curve arithmetic and isogeny computations, other forms of elliptic curves can be used to produce an efficient result. In this paper, we present the new hybrid method for isogeny-based cryptosystem using Edwards curves. Unlike the previous hybrid methods, we exploit Edwards curves for recovering the curve coefficients and Montgomery curves for other operations. To this end, we first carefully examine and compare the computational cost of Montgomery and Edwards isogenies. Then, we fine-tune and tailor Edwards isogenies in order to blend with Montgomery isogenies efficiently. Additionally, we present the implementation results of Supersingular Isogeny Diffie--Hellman (SIDH) key exchange using the proposed method. We demonstrate that our method outperforms the previously proposed hybrid method, and is as fast as Montgomery-only implementation. Our results show that proper use of Edwards curves for isogeny-based cryptosystem can be quite practical.

Category / Keywords: Isogeny, Post-quantum cryptography, Montgomery curves, Edwards curves, SIDH

Date: received 19 Dec 2018, last revised 11 Aug 2019

Contact author: suhrikim at gmail com

Available format(s): PDF | BibTeX Citation

Version: 20190812:001141 (All versions of this report)

Short URL: ia.cr/2018/1215


[ Cryptology ePrint archive ]