Isogenes - I'm a Bit Grumpy About It.

Are the isogenies kaput?! There's a new attack that breaks all the known parameter sets for SIDH/SIKE, so Steven Galbraith helps explain where the hell this came from, and where isogeny crypto goes from here.

Transcript:
https://securitycryptographywhatever.com/2022/08/11/hot-cryptanalytic-summer-with-steven-galbraith/

Merch: https://merch.scwpodcast.com

Links:

• https://eprint.iacr.org/2022/975.pdf
• https://eprint.iacr.org/2022/1026.pdf
• https://ellipticnews.wordpress.com/2022/07/31/breaking-supersingular-isogeny-diffie-hellman-sidh/
• GPST active adaptive attack against SIDH: https://eprint.iacr.org/2016/859.pdf
• Failing to hash into supersingular isogeny graphs: https://eprint.iacr.org/2022/518.pdf
• https://research.nccgroup.com/2022/08/08/implementing-the-castryck-decru-sidh-key-recovery-attack-in-sagemath/
• Kuperberg attack via Peikert: https://eprint.iacr.org/2019/725.pdf
• SQISign: https://eprint.iacr.org/2020/1240.pdf
• (Post recording)  Breaking SIDH in polynomial time:
  https://eprint.iacr.org/2022/1038.pdf

"Security Cryptography Whatever" is hosted by Deirdre Connolly (@durumcrustulum), Thomas Ptacek (@tqbf), and David Adrian (@davidcadrian)