Are the isogenies kaput?! There's a new attack that breaks all the known parameter sets for SIDH/SIKE, so Steven Galbraith helps explain where the hell this came from, and where isogeny crypto goes from here.

Transcript: https://share.descript.com/view/Xiv307FvOPA

Merch: https://merch.scwpodcast.com

Links:

https://eprint.iacr.org/2022/975.pdf
https://eprint.iacr.org/2022/1026.pdf
https://ellipticnews.wordpress.com/2022/07/31/breaking-supersingular-isogeny-diffie-hellman-sidh/
GPST active adaptive attack against SIDH: https://eprint.iacr.org/2016/859.pdf
Failing to hash into supersingular isogeny graphs: https://eprint.iacr.org/2022/518.pdf
https://research.nccgroup.com/2022/08/08/implementing-the-castryck-decru-sidh-key-recovery-attack-in-sagemath/
Kuperberg attack via Peikert: https://eprint.iacr.org/2019/725.pdf
SQISign: https://eprint.iacr.org/2020/1240.pdf
(Post recording) Breaking SIDH in polynomial time:
https://eprint.iacr.org/2022/1038.pdf

"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@davidcadrian)

Get the future of podcasts.