[tor-dev] Quantum-safe Hybrid handshake for Tor

[Jesse V]

On 04/03/2016 10:37 AM, Jeff Burdges wrote:
> I should read up on this compression business since I'd no idea they
> were so small.  At first blush, these SIDH schemes must communicate
> curve parameters of the curve the isogeny maps to and two curve points
> to help the other party compute the isogeny on their prime's subgroup,
> so maybe 3-4 times the size of a curve point, but the curve is far
> larger than any used with normal ECDH too.  

"Key Compression for Isogeny-Based Cryptosystems". Here's just the
abstract: https://eprint.iacr.org/2016/229 and the full paper can be
found here: https://eprint.iacr.org/2016/229.pdf

-- 
Jesse V

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 538 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-dev/attachments/20160403/e6da174b/attachment.sig>