Ramanujan Graphs and the Random Reducibility of Discrete Log on Isogenous Elliptic Curves

Cryptographic applications using an elliptic curve over a finite field filter curves for suitability using their order as the primary criterion: e.g. checking that their order has a large prime divisor before accepting it. It is therefore natural to ask whether the discrete log problem (dlog) has the same difficulty for all curves with the same order; if so it would justify the above practice. We prove that this is essentially true by showing random reducibility of dlog among such curves, assuming the Generalized Riemann Hypothesis (GRH). Our reduction proof works for curves with (nearly) the same endomorphism rings, but it is unclear if such a reduction exists in general. This suggests that in addition to the order, the conductor of its endomorphism ring may play a role. The random self-reducibility for dlog over finite fields is well known; the non-trivial part here is that one must relate non-isomorphic algebraic groups of two isogenous curves. We construct certain expander graphs ...

• Type: Journal
• Year: 2004
• Where: CORR
• Authors: David Jao, Stephen D. Miller, Ramarathnam Venkatesan
• Keywords: CORR 2004, Education, Elliptic Curves, Endomorphism Ring, Finite Fields