Hensel-lifting black-box algorithms and fast trace computation for elliptic-curve endomorphisms
Lorenz Panny, Damien Robert, and Alessandro Sferlazza.
2026. eprint
|
code
Evaluation of Modular Polynomials from Supersingular Elliptic Curves
Maria Corte‑Real Santos, Jonathan Komada Eriksen, Antonin Leroux, Michael Meyer, and Lorenz Panny.
LuCaNT 2025. 2025. eprint
|
code
On breaking McEliece keys using brute force
Lorenz Panny.
PQCrypto 2026. 2025. eprint
|
code
The SEA algorithm for endomorphisms of supersingular elliptic curves
Travis Morrison, Lorenz Panny, Jana Sotáková, and Michael Wills.
2025. eprint
|
code
KLaPoTi: An asymptotically efficient isogeny group action from 2‑dimensional isogenies
Lorenz Panny, Christophe Petit, and Miha Stopar.
Communications in Cryptology 2(3), 2025. 2024. eprint
|
code (Sage)
|
code (Rust)
Isogeny problems with level structure
Luca De Feo, Tako Boris Fouotsa, and Lorenz Panny.
EUROCRYPT 2024. 2024. eprint
SCALLOP‑HD: group action from 2‑dimensional isogenies
Mingjie Chen, Antonin Leroux, and Lorenz Panny.
PKC 2024. 2024. eprint
|
code
Deuring for the People: Supersingular Elliptic Curves with Prescribed Endomorphism Ring in General Characteristic
Jonathan Komada Eriksen, Lorenz Panny, Jana Sotáková, and Mattia Veroni.
LuCaNT 2023. 2023. eprint
|
code
|
slides
SCALLOP: scaling the CSI‑FiSh
Luca De Feo, Tako Boris Fouotsa, Péter Kutas, Antonin Leroux, Simon-Philipp Merz, Lorenz Panny, and Benjamin Wesolowski.
PKC 2023. 2023. eprint
|
code
A Direct Key Recovery Attack on SIDH
Luciano Maino, Chloe Martindale, Lorenz Panny, Giacomo Pope, and Benjamin Wesolowski.
EUROCRYPT 2023. 2023. eprint
|
code
Supersingular Curves You Can Trust
Andrea Basso, Giulio Codogni, Deirdre Connolly, Luca De Feo, Tako Boris Fouotsa, Guido Maria Lido, Travis Morrison, Lorenz Panny, Sikhar Patranabis, and Benjamin Wesolowski.
EUROCRYPT 2023. 2022. eprint
|
code
|
slides
Disorientation faults in CSIDH
Gustavo Banegas, Juliane Krämer, Tanja Lange, Michael Meyer, Lorenz Panny, Krijn Reijnders, Jana Sotáková, and Monika Trimoska.
EUROCRYPT 2023. 2022. eprint
|
code
Efficient Multiplication of Somewhat Small Integers using Number-Theoretic Transforms
Hanno Becker, Vincent Hwang, Matthias J. Kannwischer, Lorenz Panny, and Bo-Yin Yang.
IWSEC 2022. 2022. eprint
|
code (ARMv7-M)
|
code (ARMv8.1-M)
|
slides
Entropoids: Groups in Disguise
Lorenz Panny.
MathCrypt 2021 (poster presentation). 2021. eprint
|
code
|
slides
Improved torsion-point attacks on SIDH variants
Victoria de Quehen, Péter Kutas, Chris Leonardi, Chloe Martindale, Lorenz Panny, Christophe Petit, and Katherine E. Stange.
CRYPTO 2021. 2020. eprint
|
code
Guess what?! On the impossibility of unconditionally secure public-key encryption
Lorenz Panny.
Mathematical Cryptology 0(1), 2020, pp. 1–7. 2019. eprint
Rational isogenies from irrational endomorphisms
Wouter Castryck, Lorenz Panny, and Frederik Vercauteren.
EUROCRYPT 2020. 2019. eprint
|
code
|
slides
Isogeny-based hashing despite known endomorphisms
Lorenz Panny.
2019. eprint
How to not break SIDH
Chloe Martindale and Lorenz Panny.
CFAIL 2019.
2019. eprint
|
slides
Quantum Equivalence of the DLP and CDHP for Group Actions
Steven Galbraith, Lorenz Panny, Benjamin Smith, and Frederik Vercauteren.
Mathematical Cryptology 1(1), 2021, pp. 40–44. 2018. eprint
Faster SeaSign signatures through improved rejection sampling
Thomas Decru, Lorenz Panny, and Frederik Vercauteren.
PQCrypto 2019. 2018. eprint
Quantum circuits for the CSIDH: optimizing quantum evaluation of isogenies
Daniel J. Bernstein, Tanja Lange, Chloe Martindale, and Lorenz Panny.
EUROCRYPT 2019. 2018. eprint
|
code
|
website
CSIDH: An Efficient Post-Quantum Commutative Group Action
Wouter Castryck, Tanja Lange, Chloe Martindale, Lorenz Panny, and Joost Renes.
ASIACRYPT 2018. 2018. eprint
|
code
|
slides
|
website
HILA5 Pindakaas: On the CCA security of lattice-based encryption with error correction
Daniel J. Bernstein, Leon Groot Bruinderink, Tanja Lange, and Lorenz Panny.
AFRICACRYPT 2018. 2017. eprint
|
code
|
slides
Foundational (co)datatypes and (co)recursion for higher-order logic
Julian Biendarra, Jasmin Christian Blanchette, Aymeric Bouzy, Martin Desharnais, Mathias Fleury, Johannes Hölzl, Ondřej Kunčar, Andreas Lochbihler, Fabian Meier, Lorenz Panny, Andrei Popescu, Christian Sternagel, René Thiemann, and Dmitriy Traytel.
FroCoS 2017. 2017. pdf
Autocorrelation-Based Detection of Infinite Loops at Runtime
Andreas Ibing, Julian Kirsch, and Lorenz Panny.
DASC 2016. 2016. pdf
Truly modular (co)datatypes for Isabelle/HOL
Jasmin Christian Blanchette, Johannes Hölzl, Andreas Lochbihler, Lorenz Panny, Andrei Popescu, and Dmitriy Traytel.
ITP 2014. 2014. pdf
Primitively (co)recursive definitions for Isabelle/HOL
Lorenz Panny, Jasmin Christian Blanchette, and Dmitriy Traytel.
Isabelle Workshop 2014. pdf
|
slides
lecture notes
Elliptic Curves in Cryptography
Lorenz Panny.
Lecture notes from my class Elliptic Curves in Cryptography, course CIT413030 at TUM, summer 2024. pdf
blurbs
Fantastic isogenies and how to find them
Lorenz Panny.
Notes for week 6 of the Isogeny-based Cryptography School, originally planned in {2020, Bristol}. August 2021. pdf
Elliptic curves and isogenies: The good bits
Lorenz Panny.
Notes for week 1 of the Isogeny-based Cryptography School, originally planned in {2020, Bristol}. July 2021. pdf
slides
Isogeny Group Actions Cryptography Seminar, University of Bristol, Bristol (UK), 3 September 2025. slides
Post-quantum cryptography muCCC, Munich (Germany), 18 July 2025 slides
Advances in isogeny-based cryptography PQCSA summer school "PQC fundamentals", Albena (Bulgaria), 20 June 2025. slides
Introduction to isogeny-based cryptography PQCSA summer school "PQC fundamentals", Albena (Bulgaria), 17 June 2025. slides
The state of the isogeny Workshop on the mathematics of post-quantum cryptography, Zürich (Switzerland), 6 June 2025. slides
Code-based cryptography & brute-forcing McEliece keys 11th Conference of the Fachgruppe Computeralgebra, Leipzig (Germany), 3 June 2025. slides
30–ε Years of Isogeny Group Actions Swissogeny Day, Zürich (Switzerland), 20 March 2025. slides
SQIsign ⛷️ ECC 2024, Taipei (Taiwan), 30 October 2024. slides
Isogeny Group Actions ECC 2024 Autumn School, Taipei (Taiwan), 29 October 2024. slides
The state of the isogeny Berlin Crypto Meetup, Berlin (Germany), 23 September 2024. slides
To the 𝖤𝗇𝖽 and back Mathematics for post-quantum cryptanalysis, Budapest (Hungary), 8 August 2024. slides
Computing the Deuring correspondence and applications to cryptography Oberseminar "Arithmetische und Algebraische Geometrie", Munich (Germany), 19 June 2024. slides
Isogeny-based Cryptography QSI Spring School, Porto (Portugal), 15 March 2024. slides
Forging tropical signatures AAC'24, Abu Dhabi (UAE), 8 March 2024. slides
|
< href="/files/tropical-attack.tar.gz">code
Cryptography & Quantum Computers Inaugural Lecture (TUM Mathematics Department Colloquium), Garching (Germany), 7 February 2024. slides
Asymmetrische Kryptographie (in German) Youth Science Club, Munich (Germany), 26 January 2024. slides
How 2 Sage Dev?? I-sage-ny Days, Leuven (Belgium), 17 January 2024. slides
Ideal-to-isogeny algorithms: An overview KULB Seminar, Brussels (Belgium), 15 December 2023. slides
Isogenies: The basics, some applications, and nothing much in between TUM ICE Seminar, Munich (Germany), 5 December 2023. slides
Deuring for the People: Supersingular Elliptic Curves with Prescribed Endomorphism Ring in General Characteristic SIAM Conference on Applied Algebraic Geometry, Eindhoven (Netherlands), 13 July 2023. slides
Supersingular Curves You Can Trust
joint w/ Andrea Basso.
EUROCRYPT 2023, Lyon (France), 26 April 2023. slides
SIKE不再 Seminar on recent developments in post-quantum cryptography, Academia Sinica, Taipei (Taiwan), 15 December 2022. slides
Isogenies in SageMath: Past, Present, Future Leuven Isogeny Days 3, Leuven (Belgium), 22 September 2022. slides
Efficient Multiplication of Somewhat Small Integers using Number-Theoretic Transforms
joint w/ Matthias Kannwischer.
IWSEC 2022, online, 31 August 2022. slides
Curves you can trust Rump session at CRYPTO 2022, Santa Barbara (California), 16 August 2022. slides
Diffie–Hellman reductions COSIC seminar, Leuven (Belgium), 2 August 2019. slides
Introduction to Isogeny-based Cryptography
joint w/ Chloe Martindale.
SIAM Conference on Applied Algebraic Geometry, Bern (Switzerland), 10 July 2019. slides
Isogenies Ⅰ & Ⅱ Executive School on Post-Quantum Cryptography, Eindhoven (Netherlands), 2 July 2019. slides
How to not break SIDH CFAIL 2019, New York (USA), 1 June 2019. slides
Diffie–Hellman reductions Ei/Ψ seminar, Eindhoven (Netherlands), 29 April 2019. slides
CSIDH: An Efficient Post-Quantum Commutative Group Action dcypher DCSRP 2019 presentation @ ICT.OPEN 2019, Hilversum (Netherlands), 20 March 2019. slides
Introduction to isogeny-based cryptography AIM workshop "Quantum algorithms for analysis of public-key crypto", San Jose (California), 7 February 2019. slides
CSIDH: An Efficient Post-Quantum Commutative Group Action Asiacrypt 2018, Brisbane (Australia), 6 December 2018. slides
Speedier snail signatures Rump session at ECC 2018, Osaka (Japan), 20 November 2018. Rump session at Asiacrypt 2018, Brisbane (Australia), 4 December 2018. slides
/ˈsiːˌsaɪd/ School on Integrating Advanced Cryptography with Applications, Kos (Greece), 20 September 2018. slides
CSIDH: An Efficient Post-Quantum Commutative Group Action
joint w/ Chloe Martindale.
Crypto Working Group, Utrecht (Netherlands), 14 September 2018. slides
Cryptanalysis of NISTPQC submissions
joint w/ Daniel J. Bernstein and Tanja Lange.
Workshop on Attacks in Cryptography, Santa Barbara (California), 18 August 2018. slides
HILA5 Pindakaas: On the CCA security of lattice-based encryption with error correction Africacrypt 2018, Marrakesh (Morocco), 7 May 2018. slides
CSIDH: an efficient post-quantum commutative group action Recent results session at PQCrypto 2018, Fort Lauderdale (Florida), 10 April 2018. slide
NISTPQC is so much fun! 10900qmmP Combined event on post-quantum cryptography, Costa Adeje (Tenerife), 31 January 2018. slides
You could have invented Supersingular-Isogeny Diffie-Hellman ECRYPT-NET school on correct and secure implementation, Platanias (Greece), 11 October 2017. slides
Primitively (co)recursive definitions for Isabelle/HOL Isabelle Workshop 2014, Vienna (Austria), 13 July 2014. slides
theses
Cryptography on Isogeny Graphs
Lorenz Panny.
PhD thesis in Cryptography, Technische Universiteit Eindhoven, February 2021. pdf
|
errata
|
stellingen
|
lekenpraatje
Efficient point counting and Monsky-Washnitzer cohomology
Lorenz Panny.
M.Sc. thesis in Mathematics, Technische Universität München, March 2017. pdf
Schoof's algorithm for elliptic curves
Lorenz Panny.
B.Sc. thesis in Mathematics, Technische Universität München, July 2015. pdf
Primitively (co)recursive function definitions for Isabelle/HOL
Lorenz Panny.
B.Sc. thesis in Computer Science, Technische Universität München, August 2014. pdf
Polynomfaktorisierung (in German)
Lorenz Panny.
Term paper in Mathematics, Technische Universität München, March 2015. pdf