Sage implementation of the attack against the Oblivious PRF from supersingular isogenies

The code contained in this repository can be used to win the Attack Game 12 (Auxiliary One-More SIDH) contained in the Asiacrypt 2020 Oblivious Pseudorandom Functions from Isogenies paper.

Requirements

The code runs on Sage 9.2 compiled with Python 3.

Usage

1. git clone https://github.com/isogenists/isogeny-OPRF.git
2. cd isogeny-OPRF/src/attack
3. sage one_more_attack.sage

Parameter sets

The folder paramsets contains Sage files with different parameters which cna be used to instantiate the attack. The Sage script accepts the -e flag in order to select one of the parameter sets. Examples:

sage one_more_attack.sage -e 3

The -q flag controls the number of queries being 2^q, e.g.

sage one_more_attack.sage -e 4 -q 8

Credits

The explore_dfs_optimized has been copied from Enric Florit's sage implementation of the isogenies claw attack