Abstract:The supersingular Endomorphism Ring problem is the following: given a supersingular elliptic curve, compute all of its endomorphisms. The presumed hardness of this problem is foundational for isogeny-based cryptography. The One Endomorphism problem only asks to find a single non-scalar endomorphism. We prove that these two problems are equivalent, under probabilistic polynomial time reductions. We prove a number of consequences. First, assuming the hardness of the endomorphism ring problem, the Charles--Goren--Lauter hash function is collision resistant, and the SQIsign identification protocol is sound. Second, the endomorphism ring problem is equivalent to the problem of computing arbitrary isogenies between supersingular elliptic curves, a result previously known only for isogenies of smooth degree. Third, there exists an unconditional probabilistic algorithm to solve the endomorphism ring problem in time O~(sqrt(p)), a result that previously required to assume the generalized Riemann hypothesis. To prove our main result, we introduce a flexible framework for the study of isogeny graphs with additional information. We prove a general and easy-to-use rapid mixing theorem. The proof of this result goes via an augmented Deuring correspondence and the Jacquet-Langlands correspondence.

Simultaneous supersingular reductions of Hecke orbits

Distribution of supersingular primes for abelian surfaces

Quantitative reduction theory and unlikely intersections

Special unipotent representations of real classical groups: counting and reduction

Endomorphism rings of supersingular elliptic curves over and binary quadratic forms

Endomorphism Rings of Supersingular Elliptic Curves over F P

On the Zeta functions of supersingular isogeny graphs and modular curves

Endomorphism Rings of Supersingular Elliptic Curves and Quadratic Forms

$p$-converse theorems for elliptic curves of potentially good ordinary reduction at Eisenstein primes

On the Kodaira types of elliptic curves with potentially good supersingular reduction

Ordinary primes in Hilbert modular varieties

The supersingular endomorphism ring problem given one endomorphism

The Endomorphism Rings of Supersingular Elliptic Curves over $\mathbb{F}_p$ and the Binary Quadratic Forms

Hecke orbits and the Mordell-Lang conjecture in distinguished categories

On the acyclicity of reductions of elliptic curves modulo primes in arithmetic progressions

Almost ordinary Abelian surfaces over global function fields with application to integral points

Superspecial abelian varieties over finite prime fields

Irreducibility of the space of cyclic covers of algebraic curves of fixed numerical type and the irreducible components of $Sing (\bar{\mathfrak M_g})$

Non-optimal levels of some reducible mod $p$ modular representations

The supersingular Endomorphism Ring and One Endomorphism problems are equivalent

On the Mordell-Weil Ranks of supersingular abelian varieties over $\mathbb{Z}_p^2$-extensions