Explicit isogenies in quadratic time in any characteristic

Abstract : Consider two ordinary elliptic curves $E,E'$ defined over a finite field $\F_q$, and suppose that there exists an isogeny $\psi$ between $E$ and $E'$. We propose an algorithm that determines $\psi$ from the knowledge of $E$, $E'$ and of its degree $r$, by using the structure of the $ℓ$-torsion of the curves (where $ℓ$~is a prime different from the characteristic~$p$ of the base field). Our approach is inspired by a previous algorithm due to Couveignes, that involved computations using the $p$-torsion on the curves. The most refined version of that algorithm, due to De Feo, has a complexity of~$\tildO(r^2) p^{O(1)}$ base field operations. On the other hand, the cost of our algorithm is $\tildO(r^2) \log(q)^{O(1)}$, for a large class of inputs; this makes it an interesting alternative for the medium- and large-characteristic cases.
Complete list of metadatas

Contributor : Cyril Hugounenq <>
Submitted on : Friday, May 27, 2016 - 4:43:25 PM
Last modification on : Thursday, February 7, 2019 - 4:47:16 PM
Long-term archiving on : Sunday, August 28, 2016 - 10:18:25 AM


Files produced by the author(s)


  • HAL Id : hal-01320940, version 1
  • ARXIV : 1603.00711


Luca de Feo, Cyril Hugounenq, Jérôme Plût, Eric Schost. Explicit isogenies in quadratic time in any characteristic. 2016. ⟨hal-01320940⟩



Record views


Files downloads