Skip to content
NewA calmer, faster ZeroHour

Smoothness of Shortest Isogenies to Frobenius Conjugates

arXiv cs.CRby Yi Ouyang ()1 min read2
AI summary · grok-4.7Summaries by Vani AI

Proof makes Wesolowski's subexponential attack on the supersingular endomorphism ring problem unconditional.

The paper studies a uniformly random supersingular elliptic curve and the minimum degree of an isogeny from that curve to its Frobenius conjugate. It proves that this degree is smooth. The result removes a condition from Wesolowski's p^(1/3+o(1)) attack, making the attack on the supersingular endomorphism ring problem unconditional.

Key facts
  • Proves smoothness of the shortest isogeny degree to the Frobenius conjugate.
  • Applies to a uniform supersingular curve over the algebraic closure of F_p.
  • Makes Wesolowski's p^(1/3+o(1)) endomorphism-ring attack unconditional.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

1 min read at arxiv.org

Let $E$ be chosen uniformly from the geometric isomorphism classes of supersingular elliptic curves over $\overline{\mathbb{F}}_p$ and $δ_E$ be the minimum degree of isogenies from $E$ to its Frobenius conjugate $E^{(p)}$. We prove the smoothness of $δ_E$ and hence affirm Wesolowski's $p^{1/3+o(1)}$ attack on the supersingular endomorphism ring problem is unconditional.

arXiv cs.CR

By Yi Ouyang · arxiv.org

Read the full article at arXiv cs.CR

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.