On 04/03/2016 10:37 AM, Jeff Burdges wrote: > I should read up on this compression business since I'd no idea they > were so small. At first blush, these SIDH schemes must communicate > curve parameters of the curve the isogeny maps to and two curve points > to help the other party compute the isogeny on their prime's subgroup, > so maybe 3-4 times the size of a curve point, but the curve is far > larger than any used with normal ECDH too. "Key Compression for Isogeny-Based Cryptosystems". Here's just the abstract: https://eprint.iacr.org/2016/229 and the full paper can be found here: https://eprint.iacr.org/2016/229.pdf -- Jesse V
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ tor-dev mailing list tor-dev@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev