paper

On the supersingular GPST attack

arXiv:1911.00409

Abstract

We explain why the first Galbraith-Petit-Shani-Ti attack on the Supersingular Isogeny Diffie-Hellman and the Supersingular Isogeny Key Encapsulation fails in some cases.

On the supersingular GPST attack · wovepaper