… problem in many supersingular elliptic curves is … elliptic curve cryptosystem in disguise. We
did not yet succeed in fully generalizing them to other classes of (supersingular) elliptic curves…

… in many supersingular elliptic curves is efficiently … an elliptic curve cryptosystem in disguise.
We did not attempt to fully generalize them to other classes of (supersingular) elliptic curves, …

… supersingular or all ordinary. Traditionally, most elliptic curve cryptography uses ordinary
curves; however, for this work we will be interested in supersingular curves. We assume for the …

… cryptosystems based on the conjectured difficulty of finding isogenies between supersingular
elliptic curves… previous isogeny-based cryptosystems over ordinary curves. This paper is an …

… choose elliptic curves over finite fields with respect to application for such cryptosystems. The
… Menezes, Okamoto and Vanstone propose to use some other supersingular elliptic curves …

… elliptic curves, supersingular curves always have small k. Of course, there are lots of non-…
supersingular elliptic curve. In this section we show that the use of other supersingular curves …

… scheme, similar in spirit to the RSA cryptosystem, which uses elliptic curves over the ring '!In. …
discussion to non-supersingular elliptic curves. However, supersingular curves may also be …

… We present an overview of supersingular isogeny cryptography and how it fits into the broad
… tutorial of elliptic curve isogenies and the computational problems relevant for supersingular …

… Cryptographic algorithms built on isogenies between supersingular elliptic curves have, for
… go to achieve post-quantum cryptographic algorithms ie, cryptographic algorithms that do not …

… logarithm on an elliptic curve to the discrete logarithm in a finite field, a reduction which
leads to a subexponential algorithm for the discrete log on a supersingular elliptic curve but not …