BASSO, Andrea; CODOGNI, Giulio; CONNOLLY, Deirdre; DE FEO, Luca; FOUOTSA, Tako; LIDO, Guido; MORRISON, Travis; PANNY, Lorenz; PATRANABIS, Sikhar; WESOLOWSKI, Benjamin

Metadatos

Mostrar el registro completo del ítem

Licencia de uso del documento

BASSO, Andrea
University of Birmingham [Birmingham]
University of Bristol [Bristol]

CODOGNI, Giulio
Dipartimento di Matematica [Bologna]

CONNOLLY, Deirdre

Idioma

Communication dans un congrès

Este ítem está publicado en

Eurocrypt 2023, 2023-04-23, Lyon.

Resumen en inglés

Generating a supersingular elliptic curve such that nobody knows its endomorphism ring is a notoriously hard task, despite several isogeny-based protocols relying on such an object. A trusted setup is often proposed as a workaround, but several aspects remain unclear. In this work, we develop the tools necessary to practically run such a distributed trusted-setup ceremony. Our key contribution is the first statistically zero-knowledge proof of isogeny knowledge that is compatible with any base field. To prove statistical ZK, we introduce isogeny graphs with Borel level structure and prove they have the Ramanujan property. Then, we analyze the security of a distributed trusted-setup protocol based on our ZK proof in the simplified universal composability framework. Lastly, we develop an optimized implementation of the ZK proof, and we propose a strategy to concretely deploy the trusted-setup protocol.< Leer menos

Palabras clave en inglés

Isogenies

Ramanujan Graphs

Zero-knowledge Proofs

Trusted Setup

URI

https://oskar-bordeaux.fr/handle/20.500.12278/190573

Proyecto ANR

Méthodes pour les variétés abéliennes de petite dimension - ANR-20-CE40-0013
Post-quantum padlock for web browser - ANR-22-PETQ-0008

Orígen

Importado de Hal

Centros de investigación

Institut de Mathématiques de Bordeaux (IMB) - UMR 5251