… We present SCALLOP, a new isogeny-based group action on supersingular curves. … In
an attempt to solve the scaling issue of CSI-FiSh, we explore the situation where the quadratic …

… group action that solves the scaling issue of CSI-FiSh … Introduce group action that solves the
scaling issue of CSI-FiSh … CSI-FiSh: efficient isogeny based signatures through class group …

… the orientation is what renders the efficiency of SCALLOP bad in comparison to CSI-FiSh. …
security level of SCALLOP. In this line of research, CSI-FiSh was only able to scale to achieve …

… The index-calculus algorithm used in CSI-FiSh to compute … the development of large-scale
quantum computers, the danger … to the parameter generation for the SCALLOP group action. …

… based on the lossy CSI-FiSh signature scheme and give a … , due to the properties of lossy
CSI-FiSh. Moreover, we show that … for SCALLOP is needed, we utilize the lossy CSI-FiSh as the …

… parties can sample a PK of size 4 kB, for CSI-FiSh and CSI-SharK, respectively, 3.4 and 1.7
… while extended DKGs scale linearly with k in every term, structured DKGs only scale with k in …

… Of independent interest, we report that the Naor-Reingold PRF is nearly constant-time with
respect to the input length when using the lattice reductions of CSI-FiSh. Based on the work …

… We then instantiate our construction from the isogeny-based signature scheme CSI-FiSh …
A potential alternative is SCALLOP [22], which allows for larger parameter sets equivalent to …

… Recently, SCALLOP was proposed, which tackled the problem of CSI-FiSh, although it requires
… choice of log p, ℓ, and r, the cost per bit of evaluating the CGL hash function is scaled as …

… using a signature scheme such as CSI-FiSh or SeaSign for proof of … On the other hand,
CSI-FiSh can potentially be both zero-… While recent results presented in the SCALLOP paper [12] …