The computational discrete entropoid root hardness conjecture

Let Ep2\mathbb{E}_{p^2} be an entropoid, with p=2q+1p=2q+1 a safe prime having λ\lambda bits, and let gg generate E(p1)2\mathbb{E}^*_{(p-1)^2}. Let A\mathcal{A} be an algorithm for CDERP. The CDERP hardness conjecture. Over uniformly chosen (B,b)rL(\mathbf{B},\mathfrak{b})\xleftarrow{\mathbf{r}}\mathbb{L}, the probability that

A(x(B,b),(B,b))=x\mathcal{A}\left(x^{(\mathbf{B},\mathfrak{b})},(\mathbf{B},\mathfrak{b})\right)=x

is negl(λ)\mathtt{negl}(\lambda). This conjectures the computational difficulty of extracting non-associative entropoid roots; the paper gives no proof or resolution.

Sources & referencesView supporting material

Primary source

Danilo Gligoroski, “Entropoid Based Cryptography”, arXiv:2104.05598 (2021).

Progress summary

Never refreshed

Nothing recorded yet. Refresh searches the literature and the public web for attempts on this problem, and writes the first summary here.

Solutions 0

No solutions have been posted yet.