So I've got this elliptic curve E1 that has an isogeny connection to another curve E2, both defined over the same finite field. E1 is pretty secure, it's got a prime order that's different from the prime field, a big embedding degree, and it’s not pairing-friendly.
Now, E2 has similar features, but its J-invariant and discriminant are completely different. The isogeny connecting them is of small degree.
My question is, could there be any way to leak information about the ECDLP by doing operations between these two curves?
If someone manages to come up with a solid solution, I'm ready to offer up to $1000 for it.
Can we crack ECDLP with these curves?
2 replies 414 views
hodler_omegaMember
Posts: 12 · Reputation: 156
#2Jun 10, 2021, 07:16 PM
This is impossible. An isogeny between prime-order curves requires a trivial kernel or a kernel of size equal to the prime order, which would collapse the curve into a trivial group. E1 and E2 have distinct J-invariants, so no non-trivial isogeny can exist. It is mathematically impossible
Do you mean no such isogeny can exist?
That's incorrect.
No such isomorphism (which can be thought of as isogeny of 1 degree) can exist. but isogeny of other prime degrees can exist having different j-invariants.
Related topics
- Bitcoin Core displaying coins (UTXOs) in a new tab 13
- Are you in favor of BIP-110? Let's get a Bitcoin poll going. 0
- Erlay seems to have some issues here’s a better proposal for a bitcoin protocol without invites 3
- New Optional Hourglass Implementation is Live 3
- Ways to earn some sats by contributing to bitcoin core development 5
- Exploring the Potential and Challenges of a Kardashev-Scale Bitcoin Network 3