A Basso, G Borin, W Castryck, MCR Santos… - Cryptology ePrint …, 2025 - eprint.iacr.org
The problem of computing an isogeny of large prime degree from a supersingular elliptic
curve of unknown endomorphism ring is assumed to be hard both for classical as well as …