FESTA: Fast Encryption from Supersingular Torsion Attacks

Andrea Basso; Luciano Maino; Giacomo Pope

Paper 2023/660

FESTA: Fast Encryption from Supersingular Torsion Attacks

Andrea Basso

, University of Bristol

Luciano Maino, University of Bristol

Giacomo Pope, University of Bristol, NCC Group

Abstract

We introduce FESTA, an efficient isogeny-based public-key encryption (PKE) protocol based on a constructive application of the SIDH attacks. At its core, FESTA is based on a novel trapdoor function, which uses an improved version of the techniques proposed in the SIDH attacks to develop a trapdoor mechanism. Using standard transformations, we construct an efficient PKE that is IND-CCA secure in the QROM. Additionally, using a different transformation, we obtain the first isogeny-based PKE that is IND-CCA secure in the standard model. Lastly, we propose a method to efficiently find parameters for FESTA, and we develop a proof-of-concept implementation of the protocol. We expect FESTA to offer practical performance that is competitive with existing isogeny-based constructions.

Metadata

Available format(s): PDF
Category: Public-key cryptography
Publication info: A minor revision of an IACR publication in ASIACRYPT 2023
Keywords: Isogenies Public-key Encryption Trapdoor function
Contact author(s): andrea basso @ bristol ac uk
luciano maino @ bristol ac uk
giacomo pope @ nccgroup com
History: 2023-09-21: revised; 2023-05-10: received; See all versions
Short URL: https://ia.cr/2023/660
License: CC BY

BibTeX

@misc{cryptoeprint:2023/660,
      author = {Andrea Basso and Luciano Maino and Giacomo Pope},
      title = {{FESTA}: Fast Encryption from Supersingular Torsion Attacks},
      howpublished = {Cryptology {ePrint} Archive, Paper 2023/660},
      year = {2023},
      url = {https://eprint.iacr.org/2023/660}
}