You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
delfs-galbraith:
name:
short: DGlong: Delfs-Galbraithcomplexity: exp(1/2)references:
DG13: "https://arxiv.org/abs/1310.7789"comment: >- $\exp(1/4)$ reduction of the supersingular isogeny path problem to the vectorization problem for supsersingular curves over $\mathbb{F}_p$.
Pretty sure complexity: exp(1/2) should be complexity: exp(1/4)? (from the paper's abstract) but wanted to double check before editing it, as I wasn't sure if this was the specific attack for curves over F_p, or the full attack which first looks for curves over F_p then performs the e^1/4 attack which i think still has complexity e^1/2?
The text was updated successfully, but these errors were encountered:
GiacomoPope
changed the title
Typo in complexity for Delfs Galbraith
Typo in complexity for Delfs Galbraith?
Sep 3, 2022
Sorry for sitting on this for so long. In my opinion the error is in the comment, not the complexity field.
This entry is referring to the attack that starts from a curve over GF(p²) and randomly walks until it hits a curve over GF(p). The average complexity is O(√p).
But we have a general problem of it not being clear in terms of what the complexity is expressed. Are these complexities in log(p)? Or something else? I think we need a separate issue and brainstorming for this.
Yeah, agreeing with the above. Also, a Twitter user mentioned that maybe a "101 in complexities" might be useful for those not used to our notation, Maybe this could be included either at the bottom of the page as an appendix, or in the "about / FAQ" which is (somewhat) finished in a branch i was working on a few weeks ago.
Pretty sure
complexity: exp(1/2)
should becomplexity: exp(1/4)
? (from the paper's abstract) but wanted to double check before editing it, as I wasn't sure if this was the specific attack for curves over F_p, or the full attack which first looks for curves over F_p then performs the e^1/4 attack which i think still has complexity e^1/2?The text was updated successfully, but these errors were encountered: