Donghoe Heo

Optimized CSIDH Implementation Using a 2-torsion Point.

2020 · IACR Cryptology ePrint Archive

The implementation of isogeny-based cryptography mainly use Montgomery curves, as they offer fast elliptic curve arithmetic and isogeny computation. However, although Montgomery curves have efficient 3- and 4-isogeny formula, it becomes inefficient when recovering the …