crypto-attacks icon indicating copy to clipboard operation
crypto-attacks copied to clipboard

Please implement Miller inversion for some curves

Open ytrezq opened this issue 1 year ago • 0 comments

Pairings can be used for attacking the discrete logarithm on supersingular curves as you propose, it’s used for encryption or signature purposes. https://pdfupload.io/docs/8453308d#%5B%7B%22num%22%3A2790%2C%22gen%22%3A0%7D%2C%7B%22name%22%3A%22FitH%22%7D%2C343%5D shows how certain type of pairings can be inverted in subexponential time.

I’m also interested in the case where exponention inversion is already done (so just miller inversion).

ytrezq avatar Nov 28 '24 07:11 ytrezq