Isogeny-based cryptography school
Online
Schedule - virtual school
In each week, lecture notes and exercises will be released by the beginning of the week. Some lecturers will also release recorded lectures.
Please work through these at your own pace and use the discussion channels on Zulip (a sign-up link will be sent to all registered participants) to ask questions to support your learning.
Additionally, each week there will be:
- 4-8 hours of Q+A sessions on Zoom with the lecturers and/or teaching assistants.
For the times and links for these please check Zulip, which will be updated throughout the school.
The sessions will be at varying times to accommodate as many time zones as possible.
- Study sessions on Zoom where you can discuss the exercises with other participants.
For the times and links for these please check Zulip, which will be updated throughout the school.
- Approx. 2 social sessions. For the times and links, please check Zulip, which will be updated throughout the school.
Following the school, from 27th September - 1st October, there will be a special satellite virtual implementation workshop
organised by Sofia Celi from the Research team at Cloudflare.
Follow the link for more information and registration.
Week 1: Maths background I (5-9th July)
Maths background on elliptic curves lectured by Lorenz Panny. Notes and exercises.
Maths background on class groups lectured by Jean-Francois Biasse.
Notes, exercises, and videos.
Week 2: Maths background II (12-16th July)
Maths background on quaternion algebras and Eichler orders lectured by Laia Amoros. Teaching Assistant: Ross Bowden.
Notes and exercises.
Maths background on the KLPT algorithm lectured by David Kohel.
Notes and exercises.
Week 3: Basic protocols (19-23rd July)
The CGL hash function lectured by Kristin Lauter.
Cancelled due to unforeseen circumstances. Some resources: Lecture, gentle introduction, paper, security analysis.
Introduction to SIDH and CSIDH lectured by Tanja Lange.
Videos, slides, notes, and exercises.
CSURF lectured by Wouter Castryck.
Notes and exercises.
CGamal lectured by Hiroshi Onuki.
Notes.
OSIDH lectured by Leonardo Colo.
Notes and exercises. Important security update (December 2021).
Week 4: Signature schemes (26-30th July)
SIDH signatures and CSI-FiSh lectured by Ward Beullens.
Notes and exercises.
GPS signatures and SQISign lectured by Antonin Leroux.
Notes and exercises.
Week 5: Advanced protocols (2-6th August)
VDFs, OTPRF, and threshold schemes lectured by Luca De Feo.
Notes and exercises.
Advanced SIDH-based protocols and challenges lectured by David Jao.
Notes and exercises.
Week 6: Classical cryptanalysis (9-13th August)
Classical torsion-point attacks lectured by Christophe Petit.
first paper, second paper,
talk on first paper (minute 33),
talk on second paper (minute 62).
Active attacks on SIDH lectured by Yan Bo Ti. TAs: Sabrina Kunzweiler and Charlotte Weitkaemper.
Notes and exercises.
Genus theory attacks on CSIDH-style schemes lectured by Jana Sotakova.
Notes and exercises.
Meet-in-the-middle and van Oorschot-Wiener applied to isogeny graphs lectured by Lorenz Panny. Notes and exercises.
Important development (October 2021).
"Week" 7: Break (16-27th August)
Week 8: Quantum cryptanalysis (30th August-3rd September)
Introduction to quantum computing lectured by Changpeng Shao.
Lecture notes, exercises, and slides.
Quantum claw-finding lectured by Samuel Jaques.
Lectures notes, exercises, and video.
Kuperberg's algorithm lectured by Chris Peikert. Cancelled.
Some resources: Kuperberg's first paper,
Kuperberg's second paper,
Kuperberg for CSIDH,
computing the CSIDH oracle,
State-of-the-art and mitigations.
Quantum torsion-point attacks lectured by Peter Kutas.
Notes, exercises, and open problems.
Week 9: Genus two (6-10th September)
Introduction to genus two and the genus two hash function lectured by Ben Smith.
Slides: part 1, part 2.
Explicit computation of isogenies in genus two lectured by Marius Vuille.
Lecture notes and exercises.
Using Kummer arithmetic to optimize genus one isogeny computations lectured by Craig Costello.
Slides.
Week 10: Efficient computation of isogenies (13-17th September)
Using different curve forms lectured by Joost Renes.
Notes and exercises.
sqrtVelu lectured by Daniel J. Bernstein.
paper, short talk (Antonin Leroux), longer talk (Luca De Feo),
software, exercises, state-of-the-art.
Radical isogenies lectured by Fre Vercauteren.
Notes and exercises.
Week 11: Implementation (20-24th September)
Constant-time implementation of isogenies lectured by Michael Meyer.
Notes and exercises.
Practical implementation challenges lectured by Francisco Rodriguez- Henriquez.
Notes, exercises, supplementary notes, software, and slides.
Implementing supersingular isogeny-based protocols and the SIDH library lectured by Patrick Longa.
Notes and exercises.
New! Week 12: Special satellite virtual implementation workshop organised by Sofia Celi from the Research team at Cloudflare. (27th September - 1st October)