side channel protections for csidh
play

Side channel protections for CSIDH Luca De Feo IBM Research Zrich - PowerPoint PPT Presentation

Side channel protections for CSIDH Luca De Feo IBM Research Zrich October 16, 2019, PHISIC, Gardanne based on joint work with D. Cervantes-Vzquez, M. Chenu, J.J. Chi-Domnguez, F. Rodrguez-Henrquez, B. Smith Slides online at


  1. Side channel protections for CSIDH Luca De Feo IBM Research Zürich October 16, 2019, PHISIC, Gardanne based on joint work with D. Cervantes-Vázquez, M. Chenu, J.J. Chi-Domínguez, F. Rodríguez-Henríquez, B. Smith Slides online at https://defeo.lu/docet

  2. Why isogenies? Six families still in NIST post-quantum competition: Lattices 9 encryption 3 signature Codes 7 encryption Multivariate 4 signature Isogenies 1 encryption Hash-based 1 signature MPC 1 signature Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 2 / 19 https://defeo.lu/docet

  3. Why isogenies? Codes 1 – 300 KB Six families still in NIST post-quantum competition: Lattices 0.5 – 10 KB Lattices 9 encryption 3 signature Isogenies Codes 7 encryption 209 B Multivariate 4 signature Isogenies 1 encryption Public key size Hash-based 1 signature NIST-1 level (AES128) MPC 1 signature (not to scale) Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 2 / 19 https://defeo.lu/docet

  4. Why isogenies? Isogenies 190 Mcycles Six families still in NIST post-quantum competition: Lattices Lattices 9 encryption 3 signature 0.5 – 5 Codes Codes 7 encryption Mcycles 1 Mcycles Multivariate 4 signature Isogenies 1 encryption Encryption performance Hash-based 1 signature NIST-1 level (AES128) MPC 1 signature (not to scale) Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 2 / 19 https://defeo.lu/docet

  5. ✣ ✭ ✰ ✮ ❂ ✣ ✭ ✮ ✰ ✣ ✭ ✮❀ ✒ ✭ ✮ ✥ ✓ ✵ ✦ ✭ ✮ ✣ ✭ ❀ ✮ ❂ ✭ ✮ ❀ ❀ ✭ ✮ ❂ ❂ ✙ Iso-what?! Keywords An isogeny is a map between two elliptic curves; Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 3 / 19 https://defeo.lu/docet

  6. ✒ ✭ ✮ ✥ ✓ ✵ ✦ ✭ ✮ ✣ ✭ ❀ ✮ ❂ ✭ ✮ ❀ ❀ ✭ ✮ ❂ ❂ ✙ Iso-what?! Keywords An isogeny is a map between two elliptic curves; It is a group morphism: ✣ ✭ P ✰ Q ✮ ❂ ✣ ✭ P ✮ ✰ ✣ ✭ Q ✮❀ Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 3 / 19 https://defeo.lu/docet

  7. ❂ ❂ ✙ Iso-what?! Keywords An isogeny is a map between two elliptic curves; It is a group morphism: ✣ ✭ P ✰ Q ✮ ❂ ✣ ✭ P ✮ ✰ ✣ ✭ Q ✮❀ It is an algebraic map: ✥ ✓ ✵ ✦ g ✭ x ✮ ✒ g ✭ x ✮ ✣ ✭ x ❀ y ✮ ❂ h ✭ x ✮ ❀ y ❀ h ✭ x ✮ Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 3 / 19 https://defeo.lu/docet

  8. ❂ ❂ ✙ Iso-what?! Keywords An isogeny is a map between two elliptic curves; It is a group morphism: ✣ ✭ P ✰ Q ✮ ❂ ✣ ✭ P ✮ ✰ ✣ ✭ Q ✮❀ It is an algebraic map: ✥ ✓ ✵ ✦ g ✭ x ✮ ✒ g ✭ x ✮ ✣ ✭ x ❀ y ✮ ❂ h ✭ x ✮ ❀ y ❀ h ✭ x ✮ It is entirely determined by its kernel (i.e., by a single point); Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 3 / 19 https://defeo.lu/docet

  9. Iso-what?! Keywords An isogeny is a map between two elliptic curves; It is a group morphism: ✣ ✭ P ✰ Q ✮ ❂ ✣ ✭ P ✮ ✰ ✣ ✭ Q ✮❀ It is an algebraic map: ✥ ✓ ✵ ✦ g ✭ x ✮ ✒ g ✭ x ✮ ✣ ✭ x ❀ y ✮ ❂ h ✭ x ✮ ❀ y ❀ h ✭ x ✮ It is entirely determined by its kernel (i.e., by a single point); Isogeny degree ❂ size of the kernel ❂ order of kernel generator ✙ size of the polynomials; Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 3 / 19 https://defeo.lu/docet

  10. ✼✦ ❋ ✄ Isogenies: an example over ❋ 11 E ✿ y 2 ❂ x 3 ✰ x E ✵ ✿ y 2 ❂ x 3 � 4 x x 2 ✰ 1 y x 2 � 1 ✥ ✦ ✣ ✭ x ❀ y ✮ ❂ ❀ x 2 x Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 4 / 19 https://defeo.lu/docet

  11. Isogenies: an example over ❋ 11 E ✿ y 2 ❂ x 3 ✰ x E ✵ ✿ y 2 ❂ x 3 � 4 x Kernel generator in red. x 2 ✰ 1 y x 2 � 1 ✥ ✦ ✣ ✭ x ❀ y ✮ ❂ ❀ This is a degree 2 map. x 2 x Analogous to x ✼✦ x 2 in ❋ ✄ q . Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 4 / 19 https://defeo.lu/docet

  12. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  13. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  14. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  15. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  16. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  17. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  18. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  19. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  20. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  21. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  22. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  23. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  24. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  25. ✣ ❂ ❂ Isogeny graphs R Q P P ✰ Q y 2 ❂ x 3 ✰ ax ✰ b 4 a 3 j ✑ 1728 � ✦ 4 a 3 ✰ 27 b 2 Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  26. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  27. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  28. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  29. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  30. ✣ ❂ ❂ ✰ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  31. ✣ ❂ ✰ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  32. ✰ ❂ ✰ ✰ � ✦ ✑ ✰ ✣ ❂ Isogeny graphs j ❂ 1728 Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  33. ✰ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs ✣ j ❂ 1728 j ❂ 287496 Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  34. ✰ ❂ ✰ ✰ � ✦ ✑ ✰ ✣ Isogeny graphs j ❂ 1728 j ❂ 287496 Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  35. The beauty and the beast (credit: Lorenz Panny) Components of particular isogeny graphs look like this: Which of these is good for crypto? Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 6 / 19 https://defeo.lu/docet

  36. The beauty and the beast (credit: Lorenz Panny) Components of particular isogeny graphs look like this: Which of these is good for crypto? Both. Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 6 / 19 https://defeo.lu/docet

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend


More recommend