Supersingular Curves You Can Trust - ANR - Agence nationale de la recherche Accéder directement au contenu
Communication Dans Un Congrès Année : 2023

Supersingular Curves You Can Trust

Résumé

Generating a supersingular elliptic curve such that nobody knows its endomorphism ring is a notoriously hard task, despite several isogeny-based protocols relying on such an object. A trusted setup is often proposed as a workaround, but several aspects remain unclear. In this work, we develop the tools necessary to practically run such a distributed trusted-setup ceremony. Our key contribution is the first statistically zero-knowledge proof of isogeny knowledge that is compatible with any base field. To prove statistical ZK, we introduce isogeny graphs with Borel level structure and prove they have the Ramanujan property. Then, we analyze the security of a distributed trusted-setup protocol based on our ZK proof in the simplified universal composability framework. Lastly, we develop an optimized implementation of the ZK proof, and we propose a strategy to concretely deploy the trusted-setup protocol.
Fichier principal
Vignette du fichier
2022-1469-2.pdf (867.21 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-04052486 , version 1 (30-03-2023)

Licence

Paternité

Identifiants

  • HAL Id : hal-04052486 , version 1

Citer

Andrea Basso, Giulio Codogni, Deirdre Connolly, Luca de Feo, Tako Boris Fouotsa, et al.. Supersingular Curves You Can Trust. Eurocrypt 2023, Apr 2023, Lyon, France. ⟨hal-04052486⟩
62 Consultations
98 Téléchargements

Partager

Gmail Facebook X LinkedIn More