cronokirby

(2026-01) Chasing Rabbits Through Hypercubes; Better algorithms for higher dimensional 2-isogeny computations

2026-01-24

Abstract

The devastating attacks against SIDH (Supersingular Isogeny Diffie-Hellman) have popularised the practical use of isogenies of dimension 22 and above in cryptography. Though this effort was primarily focused on dimension 2, 44-dimensional isogenies, have been used in several isogeny-based cryptographic constructions including SQIsignHD, SQIPrime, (qt-)Pegasis and MIKE. These isogenies are also interesting for number theoretic applications related to higher dimensional isogeny graphs. In 2024, a work by Pierrick Dartois introduced algorithms to compute efficiently chains of 22-isogenies with Mumford's level 22 theta coordinates in all dimensions, focusing on cryptographic applications in dimension 44. In this paper, we improve Dartois' results by providing a simpler and faster method to compute generic isogenies in any dimension, and new computation and evaluation algorithms adapted to gluing isogenies from a product of four elliptic curves, with techniques that generalise a previous work by Max Duparc in dimension 22. Unlike previous algorithms by Dartois, the algorithms we propose are both easy to implement and naturally constant time. We apply our results to propose the first constant time C implementation of a 44-dimensional chain of 22-isogenies, adapted to the qt-Pegasis algorithm and running in less than 2525 ms for a 500500 bit prime. With our new gluing evaluation method, we are able to work fully over Fp\mathbb{F}_p instead of Fp2\mathbb{F}_{p^2}, allowing further efficiency gains. Indeed, our new formulae accelerate the proof of concept SageMath implementation of qt-Pegasis by up to 19 % for a 500500 bit prime.