Krijn Reijnders
LightNews LightNews
krijn.isogeni.es
Krijn Reijnders
@krijn.isogeni.es
150 followers 92 following 54 posts
Post-doc in post-quantum cryptography. Mostly isogenies nowadays. See krijnreijnders.com
Posts Replies Media Videos
Pinned
krijn.isogeni.es
Krijn Reijnders @krijn.isogeni.es · Nov 5
Having fixed most issues, isogeni.es should be up and running now. Perhaps useful for others too!

(it simply scrapes recent isogeny papers from ePrint, and formats these nicely)
isogeni.es
Reposted by Krijn Reijnders
parismarx.com
Silicon Valley’s alliance with Donald Trump was a mask off moment and showed the world we can’t depend on US tech companies.

For the past few months, I’ve been trying to get off US tech and I put together a guide so you find alternatives too. I hope you find it helpful!
Getting off US tech: a guide
I’m in the process of dropping US tech services. Here’s how I did it, and options you should consider.
www.disconnect.blog
July 18, 2025 at 4:17 PM
krijn.isogeni.es
New year, new pairing
January 3, 2026 at 12:23 PM
Reposted by Krijn Reijnders
cosic.bsky.social
🎄 Happy holidays from all of us in the COSIC research group! Proof that science is better with friends.
December 22, 2025 at 12:57 PM
krijn.isogeni.es
Dear publishers, this may come as a shock to you, but in general, I do not want to download a tiny .bib file for every reference. I simply want to copy-paste.
December 19, 2025 at 9:22 AM
Reposted by Krijn Reijnders
maria.isogeny.club
Catch up on last weeks Isogeny Club talk! We welcomed Eli Orvis who taught us about abstract isogeny graphs: www.youtube.com/watch?v=Gzcc...
The Isogeny Club #7.4 Ihara zeta functions of abstract isogeny graphs and modular curves
YouTube video by The Isogeny Club
www.youtube.com
November 13, 2025 at 9:54 AM
Reposted by Krijn Reijnders
cosic.bsky.social
Great news: the paper "Integral cryptanalysis in characteristic $p$" by our researchers Tim Beyne & Michiel Verbauwhede will receive the Best Theory and Early Career Award at #Asiacrypt 2025!
asiacrypt.iacr.org/2025/program...
November 3, 2025 at 10:20 AM
Reposted by Krijn Reijnders
maria.isogeny.club
Last week at The Isogeny Club we had a great talk by Sebastian Spindler about modular curves! Check it out here: www.youtube.com/watch?v=EDU7...

Be sure to join us again next Tuesday at the usual time :) isogeny.club
The Isogeny Club #7.2 Counting l-isogenies with different modular polynomials
YouTube video by The Isogeny Club
www.youtube.com
October 14, 2025 at 10:13 AM
Reposted by Krijn Reijnders
maria.isogeny.club
The Isogeny Club Season 7 starts today! At 5pm CEST, Bruno Sterner will talk about finding large smooth twins from short lattice vectors. More details at isogeny.club
September 23, 2025 at 7:23 AM
Reposted by Krijn Reijnders
dfaranha.bsky.social
The impact of Alfred Menezes in cryptography is profound. Francisco RH and I are organizing an afternoon session in Latincrypt to celebrate Alfred's career:

menezesfest.info

If you're coming to Medellín, consider attending!
MenezesFest 2025
MenezesFest brings together researchers, colleagues, and friends to celebrate the career and impact of Alfred Menezes.
menezesfest.info
September 18, 2025 at 6:17 AM
krijn.isogeni.es
Announcing The Isogeny Problems!

A curated list of the seven foremost unsolved problems in isogeny-based cryptography. Solving one of these profound questions would mark a monumental advance, and as a resolver you'd get eternal honor and epic rewards!

Full list: isogeni.es/problems
The Isogeny Problems
isogeni.es
September 15, 2025 at 7:43 AM
Reposted by Krijn Reijnders
eprint.ing.bot
Qlapoti: Simple and Efficient Translation of Quaternion Ideals to Isogenies (Giacomo Borin, Maria Corte-Real Santos, Jonathan Komada Eriksen, Riccardo Invernizzi, Marzio Mula, Sina Schaeffler, Frederik Vercauteren) ia.cr/2025/1604
Abstract. The main building block in isogeny-based cryptography is an algorithmic version of the Deuring correspondence, called IdealToIsogeny. This algorithm takes as input left ideals of the endomorphism ring of a supersingular elliptic curve and computes the associated isogeny. Building on ideas from QFESTA, the Clapoti framework by Page and Robert reduces this problem to solving a certain norm equation. The current state of the art is however unable to efficiently solve this equation, and resorts to a relaxed version of it instead. This impacts not only the efficiency of the IdealToIsogeny procedure, but also its success probability. The latter issue has to be mitigated with complex and memory-heavy rerandomization procedures, but still leaves a gap between the security analysis and the actual implementation of cryptographic schemes employing IdealToIsogeny as a subroutine. For instance, in SQIsign the failure probability is still 2⁻⁶⁰ which is not cryptographically negligible. The main contribution of this paper is a very simple and efficient algorithm called Qlapoti which approaches the norm equation from Clapoti directly, solving all the aforementioned problems at once. First, it makes the IdealToIsogeny subroutine between 2.2 and 2.6 times faster. This signigicantly improves the speed of schemes using this subroutine, including notably SQIsign and . On top of that, Qlapoti has a cryptographically negligible failure probability. This eliminates the need for rerandomization, drastically reducing memory consumption, and allows for cleaner security reductions. Image showing part 2 of abstract.
September 11, 2025 at 4:14 PM
Reposted by Krijn Reijnders
cosic.bsky.social
"Industry perspectives on implementation and deployment" by Bas Westerbaan (Cloudfare) today at the PQCSA Workshop on Tackling the Quantum Threat in Athens.
#PQCSA #PQC #postquantum #eudigital
September 12, 2025 at 9:45 AM
Reposted by Krijn Reijnders
cosic.bsky.social
🔐 You're invited! Join us on 18 Nov 2025 in Leuven (Belgium) for the #IEEE Milestone Award Ceremony, honoring #Rijndael, the Belgian cipher selected as #AES, protecting billions worldwide. Register (free) by 25 Oct: rijndael-ieeemilestone.cs.ru.nl/index #CyberSecurity #Cryptography
August 26, 2025 at 2:04 PM
Reposted by Krijn Reijnders
cosic.bsky.social
Proud moment at #CRYPTO 2025!
“KLPT²: Algebraic Pathfinding in Dimension Two and Applications” received the Best Paper Award. 🏆
Co-authored by COSIC’s Wouter Castryck & Thomas Decru (presenter).
Read it here: eprint.iacr.org/2025/372
August 21, 2025 at 1:37 PM
Reposted by Krijn Reijnders
cosic.bsky.social
"Simpler and Faster Pairings from the Montgomery Ladder" by Giacomo Pope, Krijn Reijnders (COSIC), Damien Robert, Alessandro Sferlazza & Benjamin Smith published in IACR Communications in Cryptology and online now: cic.iacr.org/p/2/2/29
#ISOCRYPT #ISOCRYPTproject
Simpler and Faster Pairings from the Montgomery Ladder
cic.iacr.org
July 8, 2025 at 9:01 AM
krijn.isogeni.es
9 out of 10 dentists recommend solving log(p) KLPT

(from @jonathan.isogeny.club's talk at ARCTICCRYPT 2025!)
July 7, 2025 at 3:19 PM
krijn.isogeni.es
Should let people know that this exists and was exactly what I was missing in the last 5 years:

github.com/martisak/vsc...

Simply directly searches dblp from VS Code and copy-pastes the bib-entry into the bib file
GitHub - martisak/vscode-getref: Visual Code Studio interface to dblp.
Visual Code Studio interface to dblp. Contribute to martisak/vscode-getref development by creating an account on GitHub.
github.com
July 3, 2025 at 11:27 AM
Reposted by Krijn Reijnders
sejaques.bsky.social
An out-of-schedule update to my quantum landscape chart: sam-jaques.appspot.com/quantum_land..., prompted by
@craiggidney.bsky.social 's new paper: arxiv.org/abs/2505.15917.

A startling jump (20x) in how easy quantum factoring can be!

Also: much improved web design!
A chart for quantum computers, of number of qubits versus error rate, on a logarithmic scale. Broadly it shows a large gap between current quantum computers in the bottom left, and a curve in the top right of the resources they need to break RSA.
June 19, 2025 at 6:52 PM
krijn.isogeni.es
Single author, fifteen pages, reduces the bit complexity of millenia-old UOV instances!!
eprint.ing.bot ePrint Updates @eprint.ing.bot · Jun 19
Wedges, oil, and vinegar – An analysis of UOV in characteristic 2 (Lars Ran) ia.cr/2025/1143
Abstract. The Unbalanced Oil and Vinegar construction (UOV) has been the backbone of multivariate cryptography since the fall of HFE-based schemes. In fact, 7 UOV-based schemes have been submitted to the NIST additional call for signatures, and 4 of these made it to the second round. For efficiency considerations, most of these schemes are defined over a field of characteristic 2. This has as a side effect that the polar forms of the UOV public maps are not only symmetric, but also alternating. In this work, we propose a new key-recovery attack on UOV in characteristic 2 that makes use of this property. We consider the polar forms of the UOV public maps as elements of the exterior algebra. We show that these are contained in a certain subspace of the second exterior power that is dependent on the oil space. This allows us to define relations between the polar forms and the image of the dual of the oil space under the Plücker embedding. With this, we can recover the secret oil space using sparse linear algebra. This new attack has an improved complexity over previous methods and reduces the security by 4, 11, and 20 bits for uov-Ip, uov-III, and uov-V, respectively. Furthermore, the attack is applicable to MAYO₂ and improves on the best attack by 28 bits. Image showing part 2 of abstract.
June 19, 2025 at 12:39 PM
Reposted by Krijn Reijnders
eprint.ing.bot
Wedges, oil, and vinegar – An analysis of UOV in characteristic 2 (Lars Ran) ia.cr/2025/1143
Abstract. The Unbalanced Oil and Vinegar construction (UOV) has been the backbone of multivariate cryptography since the fall of HFE-based schemes. In fact, 7 UOV-based schemes have been submitted to the NIST additional call for signatures, and 4 of these made it to the second round. For efficiency considerations, most of these schemes are defined over a field of characteristic 2. This has as a side effect that the polar forms of the UOV public maps are not only symmetric, but also alternating. In this work, we propose a new key-recovery attack on UOV in characteristic 2 that makes use of this property. We consider the polar forms of the UOV public maps as elements of the exterior algebra. We show that these are contained in a certain subspace of the second exterior power that is dependent on the oil space. This allows us to define relations between the polar forms and the image of the dual of the oil space under the Plücker embedding. With this, we can recover the secret oil space using sparse linear algebra. This new attack has an improved complexity over previous methods and reduces the security by 4, 11, and 20 bits for uov-Ip, uov-III, and uov-V, respectively. Furthermore, the attack is applicable to MAYO₂ and improves on the best attack by 28 bits. Image showing part 2 of abstract.
June 19, 2025 at 12:26 AM
krijn.isogeni.es
Yessss!!!
cosic.bsky.social COSIC @cosic.bsky.social · Jun 16
Registration for the Leuven Isogeny Days 6 is now open!
📅 10–12 Sept 2025 @ KU Leuven
Morning: research talks
Afternoon: brainstorming sessions
More info: www.esat.kuleuven.be/cosic/projec...
#isogeny #isocrypt #erc #postquantum
June 16, 2025 at 9:48 AM
Reposted by Krijn Reijnders
andreavbasso.bsky.social
We (finally) published all the material from this course on SQIsign, including lecture slides and exercise sheets for the Sage laboratory. Available here: github.com/andreavico/S...
June 10, 2025 at 3:58 PM
Reposted by Krijn Reijnders
eprint.ing.bot
Orient Express: Using Frobenius to Express Oriented Isogenies (Wouter Castryck, Riccardo Invernizzi, Gioella Lorenzon, Jonas Meers, Frederik Vercauteren) ia.cr/2025/1047
Abstract. In this paper we study supersingular elliptic curves primitively oriented by an imaginary quadratic order, where the orientation is determined by an endomorphism that factors through the Frobenius isogeny. In this way, we partly recycle one of the main features of CSIDH, namely the fact that the Frobenius orientation can be represented for free. This leads to the most efficient family of ideal-class group actions in a range where the discriminant is significantly larger than the field characteristic p. Moreover, if we orient with a non-maximal order $\mathcal{O} \subset \mathbb{Q}(\sqrt{-p})$ and we assume that it is feasible to compute the ideal-class group of the maximal order, then also the ideal-class group of 𝒪 is known and we recover the central feature of SCALLOP-like constructions. We propose two variants of our scheme. In the first one, the orientation is by a suborder of the form $\mathbb{Z}[f\sqrt{-p}]$ for some f coprime to p, so this is similar to SCALLOP. In the second one, inspired by the work of Chenu and Smith, the orientation is by an order of the form $\mathbb{Z}[\sqrt{-dp}]$ where d is square-free and not a multiple of p. We give practical ways of generating parameters, together with a proof-of-concept SageMath implementation of both variants, which shows the effectiveness of our construction. Image showing part 2 of abstract.
June 5, 2025 at 4:37 PM
Reposted by Krijn Reijnders
andreavbasso.bsky.social
Starting in half an hour!
andreavbasso.bsky.social Andrea Basso @andreavbasso.bsky.social · May 17
Next week @lucianomaino.bsky.social and I will teach a week-long course on SQIsign at the University of Trento.

The course will be both in-person and online: if you're interested, you can tune in Monday morning at 10:30 at unitn.zoom.us/j/88902079708

(details and full schedule in the image below)
Title of the PhD course: Advances in Cryptography and Codes - Part 1: SQIsign Lecturers: Andrea Basso (IBM Research Zurich, CH), Luciano Maino (University of Bristol, UK) The course in short: The course offers a comprehensive and rigorous introduction to SQIsign, an advanced isogeny-based digital signature scheme designed to resist attacks from quantum computers. The course will present the mathematical foundations on which SQIsign is based and the algorithmic background necessary to understand and evaluate the security of SQIsign and other isogeny-based protocols. Complementing the theoretical material, the course also includes a practical laboratory where students will use SageMath to study and implement various aspects of SQIsign. Where (in presence): Department of Mathematics, University of Trento (IT) Via Sommarive, 5, 38123, Trento (online): https://unitn.zoom.us/j/88902079708 (Passcode: 532383) When: From May 19, 2025 to May 28, 2025 Detailed Program: Monday 19/05 10:30 - 12:30 (Room A205) & 14:30 - 16:30 (Room A221) Tuesday 20/05 10:30 - 12:30 (Room A215) & 14:30 - 16:30 (Room A213) Wednesday 21/05 10:30 - 12:30 (Room A218) & 14:30 - 16:30 (Room A215) Thursday 22/05 10:30 - 12:30 (Room A209) & 14:30 - 16:30 (Room A220) Friday 23/05 10:30 - 12:30 (Room A215) & 14:30 - 16:30 (Room A215) Tuesday 27/05 11:30 - 12:30 – Q&A, optional (Room A218) Wednesday 28/05 11:30 - 12:30 – Q&A, optional (Room A218)
May 19, 2025 at 8:01 AM
krijn.isogeni.es
tl;dr: dr. ✅

Very happy to share that I successfully defended my thesis "Isogenies & Isometries" yesterday! A thrilling experience, would recommend, 10/10
May 13, 2025 at 5:36 PM