Solving the Constructive Deuring Correspondence via the Kohel-Lauter-Petit-Tignol Algorithm
PDF

Keywords

Supersingular elliptic curves
Endomorphisms
Quaternion algebras
The Deuring correspondence

How to Cite

Kambe, Y., Yasuda, M., Noro, M., Yokoyama, K., Aikawa, Y., Takashima, K., & Kudo, M. (2022). Solving the Constructive Deuring Correspondence via the Kohel-Lauter-Petit-Tignol Algorithm. Mathematical Cryptology, 1(2), 10–24. Retrieved from https://journals.flvc.org/mathcryptology/article/view/130618

Abstract

For an odd prime p, let E0 be a supersingular elliptic curve over GF(p2) with O0 = End(E0). The Deuring correspondence gives a one-to-one correspondence between isogenies φI: E0EI and left O0-ideals I. The constructive Deuring correspondence is equivalent to the problem that computes the j-invariant of the curve EI corresponding to given I. In this paper, we compute the j-invariant of EI via the Kohel-Lauter-Petit-Tignol (KLPT) algorithm that seeks an ideal J of smooth reduced norm Nrd(J) such that EJ EI. The target j-invariant can be obtained by computing φJ: E0EJ. For every prime factor ℓ of Nrd(J), we use symbolic formulas related with isogenies to compute a basis of the ℓ-torsion group E0[ℓ], a bottleneck part in computing φJ. We demonstrate the efficacy of our method by showing our implementation results for numerical examples in primes p of up to 25 bits.

PDF
Creative Commons License

This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License.

Copyright (c) 2022 Yuta Kambe, Masaya Yasuda, Masayuki Noro, Kazuhiro Yokoyama, Yusuke Aikawa, Katsuyuki Takashima, Momonari Kudo