MCSI: A Masked Commutative Supersingular Isogeny Key Exchange with Blinded Ephemeral Keys

Furkan Cifci, Osman Emre Donder, Reyyan Cifci

We introduce MCSI, a two message key exchange we design over the CSIDH class group action, in which each party sends its ephemeral public element under an authenticated encryption…