We introduce SQIsign2D–West, a variant of SQIsign using two-dimensional isogeny representations. SQIsignHD introduced four- and eight-dimensional isogeny representations to improve signing times and provable security of SQIsign, at the cost of slower verification. It left open the question of leveraging two-dimensional representations, which we solve here by introducing new algorithmic tools. These lead to a “best-of-both-worlds” scheme: our signing times are only 2 \(\times \) to 3 \(\times \) slower than SQIsignHD but 10 \(\times \) to 15 \(\times \) faster than SQIsign, our security proof rigorously reduces to an assumption similar to the one behind SQIsignHD, and our verification times are the fastest among all present variants of SQIsign. Additionally, like SQIsignHD, SQIsign2D–West favourably scales to high levels of security. Concretely, for NIST level I we achieve signing times of 80 ms and verifying times of 4.5 ms, using optimised arithmetic for the x86_64 architecture. For NIST level V, we achieve 470 ms for signing and 31 ms for verifying.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

SQIsign2D–West

  • Andrea Basso,
  • Pierrick Dartois,
  • Luca De Feo,
  • Antonin Leroux,
  • Luciano Maino,
  • Giacomo Pope,
  • Damien Robert,
  • Benjamin Wesolowski

摘要

We introduce SQIsign2D–West, a variant of SQIsign using two-dimensional isogeny representations. SQIsignHD introduced four- and eight-dimensional isogeny representations to improve signing times and provable security of SQIsign, at the cost of slower verification. It left open the question of leveraging two-dimensional representations, which we solve here by introducing new algorithmic tools. These lead to a “best-of-both-worlds” scheme: our signing times are only 2 \(\times \) to 3 \(\times \) slower than SQIsignHD but 10 \(\times \) to 15 \(\times \) faster than SQIsign, our security proof rigorously reduces to an assumption similar to the one behind SQIsignHD, and our verification times are the fastest among all present variants of SQIsign. Additionally, like SQIsignHD, SQIsign2D–West favourably scales to high levels of security. Concretely, for NIST level I we achieve signing times of 80 ms and verifying times of 4.5 ms, using optimised arithmetic for the x86_64 architecture. For NIST level V, we achieve 470 ms for signing and 31 ms for verifying.