crypto-attacks
crypto-attacks copied to clipboard
Please implement Miller inversion for some curves
Pairings can be used for attacking the discrete logarithm on supersingular curves as you propose, it’s used for encryption or signature purposes. https://pdfupload.io/docs/8453308d#%5B%7B%22num%22%3A2790%2C%22gen%22%3A0%7D%2C%7B%22name%22%3A%22FitH%22%7D%2C343%5D shows how certain type of pairings can be inverted in subexponential time.
I’m also interested in the case where exponention inversion is already done (so just miller inversion).