Smoothness of Shortest Isogenies to Frobenius Conjugates

The paper proves that $\delta_E$, the minimum degree of an isogeny from a supersingular elliptic curve $E$ to its Frobenius conjugate $E^{(p)}$, is smooth. This smoothness implies that Wesolowski's attack on the supersingular endomorphism ring problem, which has a complexity of $p^{1/3+o(1)}$, is unconditional and valid.

Open the full episode

More from Security Radio