side channel protections for csidh
play

Side channel protections for CSIDH Luca De Feo IBM Research Zrich - PowerPoint PPT Presentation

Side channel protections for CSIDH Luca De Feo IBM Research Zrich October 16, 2019, PHISIC, Gardanne based on joint work with D. Cervantes-Vzquez, M. Chenu, J.J. Chi-Domnguez, F. Rodrguez-Henrquez, B. Smith Slides online at


  1. Side channel protections for CSIDH Luca De Feo IBM Research Zürich October 16, 2019, PHISIC, Gardanne based on joint work with D. Cervantes-Vázquez, M. Chenu, J.J. Chi-Domínguez, F. Rodríguez-Henríquez, B. Smith Slides online at https://defeo.lu/docet

  2. Why isogenies? Six families still in NIST post-quantum competition: Lattices 9 encryption 3 signature Codes 7 encryption Multivariate 4 signature Isogenies 1 encryption Hash-based 1 signature MPC 1 signature Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 2 / 19 https://defeo.lu/docet

  3. Why isogenies? Codes 1 – 300 KB Six families still in NIST post-quantum competition: Lattices 0.5 – 10 KB Lattices 9 encryption 3 signature Isogenies Codes 7 encryption 209 B Multivariate 4 signature Isogenies 1 encryption Public key size Hash-based 1 signature NIST-1 level (AES128) MPC 1 signature (not to scale) Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 2 / 19 https://defeo.lu/docet

  4. Why isogenies? Isogenies 190 Mcycles Six families still in NIST post-quantum competition: Lattices Lattices 9 encryption 3 signature 0.5 – 5 Codes Codes 7 encryption Mcycles 1 Mcycles Multivariate 4 signature Isogenies 1 encryption Encryption performance Hash-based 1 signature NIST-1 level (AES128) MPC 1 signature (not to scale) Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 2 / 19 https://defeo.lu/docet

  5. ✣ ✭ ✰ ✮ ❂ ✣ ✭ ✮ ✰ ✣ ✭ ✮❀ ✒ ✭ ✮ ✥ ✓ ✵ ✦ ✭ ✮ ✣ ✭ ❀ ✮ ❂ ✭ ✮ ❀ ❀ ✭ ✮ ❂ ❂ ✙ Iso-what?! Keywords An isogeny is a map between two elliptic curves; Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 3 / 19 https://defeo.lu/docet

  6. ✒ ✭ ✮ ✥ ✓ ✵ ✦ ✭ ✮ ✣ ✭ ❀ ✮ ❂ ✭ ✮ ❀ ❀ ✭ ✮ ❂ ❂ ✙ Iso-what?! Keywords An isogeny is a map between two elliptic curves; It is a group morphism: ✣ ✭ P ✰ Q ✮ ❂ ✣ ✭ P ✮ ✰ ✣ ✭ Q ✮❀ Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 3 / 19 https://defeo.lu/docet

  7. ❂ ❂ ✙ Iso-what?! Keywords An isogeny is a map between two elliptic curves; It is a group morphism: ✣ ✭ P ✰ Q ✮ ❂ ✣ ✭ P ✮ ✰ ✣ ✭ Q ✮❀ It is an algebraic map: ✥ ✓ ✵ ✦ g ✭ x ✮ ✒ g ✭ x ✮ ✣ ✭ x ❀ y ✮ ❂ h ✭ x ✮ ❀ y ❀ h ✭ x ✮ Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 3 / 19 https://defeo.lu/docet

  8. ❂ ❂ ✙ Iso-what?! Keywords An isogeny is a map between two elliptic curves; It is a group morphism: ✣ ✭ P ✰ Q ✮ ❂ ✣ ✭ P ✮ ✰ ✣ ✭ Q ✮❀ It is an algebraic map: ✥ ✓ ✵ ✦ g ✭ x ✮ ✒ g ✭ x ✮ ✣ ✭ x ❀ y ✮ ❂ h ✭ x ✮ ❀ y ❀ h ✭ x ✮ It is entirely determined by its kernel (i.e., by a single point); Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 3 / 19 https://defeo.lu/docet

  9. Iso-what?! Keywords An isogeny is a map between two elliptic curves; It is a group morphism: ✣ ✭ P ✰ Q ✮ ❂ ✣ ✭ P ✮ ✰ ✣ ✭ Q ✮❀ It is an algebraic map: ✥ ✓ ✵ ✦ g ✭ x ✮ ✒ g ✭ x ✮ ✣ ✭ x ❀ y ✮ ❂ h ✭ x ✮ ❀ y ❀ h ✭ x ✮ It is entirely determined by its kernel (i.e., by a single point); Isogeny degree ❂ size of the kernel ❂ order of kernel generator ✙ size of the polynomials; Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 3 / 19 https://defeo.lu/docet

  10. ✼✦ ❋ ✄ Isogenies: an example over ❋ 11 E ✿ y 2 ❂ x 3 ✰ x E ✵ ✿ y 2 ❂ x 3 � 4 x x 2 ✰ 1 y x 2 � 1 ✥ ✦ ✣ ✭ x ❀ y ✮ ❂ ❀ x 2 x Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 4 / 19 https://defeo.lu/docet

  11. Isogenies: an example over ❋ 11 E ✿ y 2 ❂ x 3 ✰ x E ✵ ✿ y 2 ❂ x 3 � 4 x Kernel generator in red. x 2 ✰ 1 y x 2 � 1 ✥ ✦ ✣ ✭ x ❀ y ✮ ❂ ❀ This is a degree 2 map. x 2 x Analogous to x ✼✦ x 2 in ❋ ✄ q . Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 4 / 19 https://defeo.lu/docet

  12. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  13. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  14. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  15. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  16. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  17. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  18. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  19. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  20. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  21. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  22. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  23. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  24. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  25. ✣ ❂ ❂ Isogeny graphs R Q P P ✰ Q y 2 ❂ x 3 ✰ ax ✰ b 4 a 3 j ✑ 1728 � ✦ 4 a 3 ✰ 27 b 2 Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  26. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  27. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  28. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  29. ✣ ❂ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs R Q P P ✰ Q Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  30. ✣ ❂ ❂ ✰ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  31. ✣ ❂ ✰ ❂ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  32. ✰ ❂ ✰ ✰ � ✦ ✑ ✰ ✣ ❂ Isogeny graphs j ❂ 1728 Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  33. ✰ ❂ ✰ ✰ � ✦ ✑ ✰ Isogeny graphs ✣ j ❂ 1728 j ❂ 287496 Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  34. ✰ ❂ ✰ ✰ � ✦ ✑ ✰ ✣ Isogeny graphs j ❂ 1728 j ❂ 287496 Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 5 / 19 https://defeo.lu/docet

  35. The beauty and the beast (credit: Lorenz Panny) Components of particular isogeny graphs look like this: Which of these is good for crypto? Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 6 / 19 https://defeo.lu/docet

  36. The beauty and the beast (credit: Lorenz Panny) Components of particular isogeny graphs look like this: Which of these is good for crypto? Both. Luca De Feo (IBM Research Zürich) Side channel protections for CSIDH PHISIC 2019 6 / 19 https://defeo.lu/docet

Recommend


More recommend