Are the isogenies kaput?! There's a new attack that breaks all the known parameter sets for SIDH/SIKE, so Steven Galbraith helps explain where the hell this came from, and where isogeny crypto goes from here.

Transcript: https://share.descript.com/view/Xiv307FvOPA

Merch: https://merch.scwpodcast.com

Links:

• https://eprint.iacr.org/2022/975.pdf
• https://eprint.iacr.org/2022/1026.pdf
• https://ellipticnews.wordpress.com/2022/07/31/breaking-supersingular-isogeny-diffie-hellman-sidh/
• GPST active adaptive attack against SIDH: https://eprint.iacr.org/2016/859.pdf
• Failing to hash into supersingular isogeny graphs: https://eprint.iacr.org/2022/518.pdf
• https://research.nccgroup.com/2022/08/08/implementing-the-castryck-decru-sidh-key-recovery-attack-in-sagemath/
• Kuperberg attack via Peikert: https://eprint.iacr.org/2019/725.pdf
• SQISign: https://eprint.iacr.org/2020/1240.pdf
• (Post recording)  Breaking SIDH in polynomial time:
  https://eprint.iacr.org/2022/1038.pdf

"Security. Cryptography. Whatever." is hosted by Deirdre Connolly, Thomas Ptacek, and David Adrian.