Cryptology ePrint Archive: Report 2020/439

The Existence of Cycles in the Supersingular Isogeny Graphs Used in SIKE

Hiroshi Onuki and Yusuke Aikawa and Tsuyoshi Takagi

Abstract: In this paper, we consider the structure of isogeny graphs in SIDH, that is an isogeny-based key-exchange protocol. SIDH is the underlying protocol of SIKE, which is one of the candidates for NIST post quantum cryptography standardization. Since the security of SIDH is based on the hardness of the path-finding problem in isogeny graphs, it is important to study those structure. The existence of cycles in isogeny graph is related to the path-finding problem, so we investigate cycles in the graphs used in SIKE. In particular, we focus on SIKEp434 and SIKEp503, which are the parameter sets of SIKE claimed to satisfy the NIST security level 1 and 2, respectively. We show that there are two cycles in the 3-isogeny graph in SIKEp434, and there is no cycles in the other graphs in SIKEp434 and SIKEp503.

Category / Keywords: public-key cryptography / Supersingular isogeny graphs, post quantum cryptography, SIDH, SIKE

Date: received 15 Apr 2020, last revised 25 Aug 2020

Contact author: onuki at mist i u-tokyo ac jp

Available format(s): PDF | BibTeX Citation

Version: 20200825:075637 (All versions of this report)

Short URL: ia.cr/2020/439


[ Cryptology ePrint archive ]