yusuke1997/dblp-id-title huggingface dataset:
Evaluation of Modular Polynomials from Supersingular Elliptic Curves
Multi User Security of LightMAC and LightMAC_Plus
Unbalanced Elementary Symmetric Boolean Functions with the Degree "d" and "wt(d)≥ 3"
A Tool for Fast and Secure LWE Parameter Selection: the FHE case
New Speed Records for Montgomery Modular Multiplication on 8-bit AVR Microcontrollers
If a Generalised Butterfly is APN then it Operates on 6 Bits
Geometric Cryptosystem
Breaking and Fixing the HB+DB protocol
On relaxed security notions for secret sharing
Lattice-Based Vulnerabilities in Lee Metric Post-Quantum Cryptosystems
Side-Channel and Fault Injection Attacks on VOLEitH Signature Schemes: A Case Study of Masked FAEST
Efficient (3,3)-isogenies on fast Kummer surfaces
On the security models for certificateless signature schemes achieving level 3 security
Efficient Arithmetic on Genus 2 Hyperelliptic Curves over Finite Fields via Explicit Formulae
Improving the MILP-based Security Evaluation Algorithms against Differential Cryptanalysis Using Divide-and-Conquer Approach
Quantum Secure Threshold Private Set Intersection Protocol for IoT-Enabled Privacy Preserving Ride-Sharing Application
BrakingBase - a linear prover, poly-logarithmic verifier, field agnostic polynomial commitment scheme
Toward Certificateless Signcryption Scheme Without Random Oracles
Tardos Fingerprinting Codes in the Combined Digit Model
Bad directions in cryptographic hash functions
TEX - A Securely Scalable Trustless Exchange
Cache Timing Attacks on Camellia Block Cipher
Cache-Attacks on the ARM TrustZone implementations of AES-256 and AES-256-GCM via GPU-based analysis
Fault and Side-Channel Attacks on Pairing Based Cryptography
Cryptanalysis of indistinguishability obfuscation using GGH13 without ideals
Multi-Party Distributed Point Functions with Polylogarithmic Key Size from Invariants of Matrices
Verifiable Isogeny Walks: Towards an Isogeny-based Postquantum VDF
NeuroSCA: Evolving Activation Functions for Side-channel Analysis
A Synthetic Indifferentiability Analysis of Some Block-Cipher-Based Hash Functions
Code-based Cryptosystem from Quasi-Cyclic Elliptic Codes
An Intimate Analysis of Cuckoo Hashing with a Stash
On the Effects of Neural Network-based Output Prediction Attacks on the Design of Symmetric-key Ciphers
A Note on "Authenticated Key Agreement Protocol for Secure Communication Establishment in Vehicle-to-Grid Environment With FPGA Implementation"
Detecting Rogue Decryption in (Threshold) Encryption via Self-Incriminating Proofs
Privacy-Preserving Ridge Regression on Distributed Data
Hide-and-Seek and the Non-Resignability of the BUFF Transform
Single-Server Private Outsourcing of zk-SNARKs
Proofs of Data Possession and Retrievability Based on MRD Codes
Computational Independence
Faster cellular automata cryptosystems with neighbor sequences
Optimizing Trees for Static Searchable Encryption
Timing attacks on Error Correcting Codes in Post-Quantum Secure Schemes
Statistically Reliable and Secure Message Transmission in Directed Networks
Low-Latency Bootstrapping for CKKS using Roots of Unity
Reclaiming Privacy for Smartphone Applications
Anonymity in Shared Symmetric Key Primitives
EzPC: Programmable, Efficient, and Scalable Secure Two-Party Computation
On the Termination of the HotStuff Protocol Within the Universally Composable Framework
Generating more Kawazoe-Takahashi Genus 2 Pairing-friendly Hyperelliptic Curves
Security Flaws in a Pairing-based Group Signature Scheme
Approximate Integer Common Divisor Problem relates to Implicit Factorization
Key recovery attacks on NTRU without ciphertext validation routine
ethSTARK Documentation
Improved Key Generation For Gentry's Fully Homomorphic Encryption Scheme
A Code-specific Conservative Model for the Failure Rate of Bit-flipping Decoding of LDPC Codes with Cryptographic Applications
CP-consensus: a Blockchain Protocol Based on Synchronous Timestamps of Compass Satellite
A One-time Stegosystem and Applications to Efficient Covert Communication
A generalization of Secret Sharing Scheme on the Basis of Recovering Algorithm, K-RA
Computational self-testing for entangled magic states
RACE: A Rapid ARM Cryptographic Engine for Code-Based Classic McEliece PQC Scheme
The Security of the Hanser-Slamanig Signature Scheme Revisited
Message Authentication on 64-bit Architectures
Machine Learning and Side-Channel Attacks on Post-Quantum Cryptography
Inaccessible Entropy for Watermarking Generative Agents
Fully-Succinct Multi-Key Homomorphic Signatures from Standard Assumptions
1-private n-party AND from 5 random bits
Two-Round Stateless Deterministic Two-Party Schnorr Signatures From Pseudorandom Correlation Functions
Pseudorandomness Against Mean and Variance Bounded Attackers
Solutions of x q k +...+x q +x=a in GF(2 n)
Homomorphic polynomial evaluation using Galois structure and applications to BFV bootstrapping
Scalable Private World Computer via Root iO: Application-Agnostic iO and Our Roadmap for Making It Practical
On the Impossibility of Short Algebraic Signatures
Revisiting Key-alternating Feistel Ciphers for Shorter Keys and Multi-user Security
Generalized Distinguishing Attack: A New Cryptanalysis of AES-like Permutations
Uncloneable Encryption, Revisited
FFT-Based Key Recovery for the Integral Attack
Revised Quantum Resistant Public Key Encryption Scheme RLCE and IND-CCA2 Security for McEliece Schemes
Universally Composable Adaptor Signatures
A New Feistel Approach Meets Fluid-SPN: Griffin for Zero-Knowledge Applications
A New Encoding Framework for Predicate Encryption with Non-Linear Structures in Prime Order Groups
Improvement of Manik et al.¡¦s remote user authentication scheme
A note on invariant linear transformations in multivariate public key cryptography
Two round multiparty computation via Multi-key fully homomorphic encryption with faster homomorphic evaluations
Password Hashing Competition - Survey and Benchmark
Mapping the Intel Last-Level Cache
On Committing Authenticated Encryption
Exponential Memory-Bound Functions for Proof of Work Protocols
Decentralized Private Steam Aggregation from Lattices
Remarks on Some Quantum Cryptographic Schemes
Identity Based Threshold Proxy Signature
Systematically Quantifying Cryptanalytic Non-Linearities in Strong PUFs
Ghostshell: Secure Biometric Authentication using Integrity-based Homomorphic Evaluations
Relations between Privacy, Verifiability, Accountability and Coercion-Resistance in Voting Protocols
On the security of Xu et al.'s authentication and key agreement scheme for telecare medicine information systems
Security is an Architectural Design Constraint
Faster Secure Multi-Party Computation of AES and DES Using Lookup Tables
Inductive Trace Properties for Computational Security
Three Input Exclusive-OR Gate Support For Boyar-Peralta's Algorithm (Extended Version)
A Masked White-box Cryptographic Implementation for Protecting against Differential Computation Analysis
A quantum algorithm for semidirect discrete logarithm problem on elliptic curves
Ipotane: Achieving the Best of All Worlds in Asynchronous BFT
Construction of Lightweight MDS Matrices over Matrix Polynomial Residue Ring
On the cost of computing isogenies between supersingular elliptic curves
Non-Cyclic Subgroups of Jacobians of Genus Two Curves
Counter Galois Onion (CGO) for Tor: Fast Non-Malleable Onion Encryption
Construction of minimal linear codes with few weights from weakly regular plateaued functions
Security Analysis of XHASH8/12
FeW: A Lightweight Block Cipher
New Efficient, Constant-Time Implementations of Falcon
Efficient Fully Homomorphic Encryption with Circularly Secure Key Switching Process
EcGFp5: a Specialized Elliptic Curve
Unconditional Tightness Bounds for Generic Reductions: The Exact Security of Schnorr Signatures, Revisited
Pattern Matching Encryption
CAS-Unlock: Unlocking CAS-Lock without Access to a Reverse-Engineered Netlist
Learning when to stop: a mutual information approach to fight overfitting in profiled side-channel analysis
Isogenies and Cryptography
On Tightly Secure Primitives in the Multi-Instance Setting
Concretely-Efficient Multi-Key Homomorphic Secret Sharing and Applications
Preimage Resistance Beyond the Birthday Bound: Double-Length Hashing Revisited
Kilroy was here: The First Step Towards Explainability of Neural Networks in Profiled Side-channel Analysis
Efficient Two-Pass Anonymous Identity Authentication Using Smart Card
Efficient computation of (3 n,3 n) -isogenies
How to manipulate curve standards: a white paper for the black hat
On Efficient Ciphertext-Policy Attribute Based Encryption and Broadcast Encryption
qDSA: Small and Secure Digital Signatures with Curve-based Diffie-Hellman Key Pairs
A Flyweight RFID Authentication Protocol
GIFT: A Small Present (Full version)
Direct Anonymous Attestation from Lattices
PROBONITE : PRivate One-Branch-Only Non-Interactive decision Tree Evaluation
Security of Multilinear Galois Mode (MGM)
Remarks on- an ideal multi-secret sharing scheme based on MSP
ABE for DFA from LWE against Bounded Collusions, Revisited
Determining the Minimum Degree of an S-box
A Note on the Chi-square Method : A Tool for Proving Cryptographic Security
A Unified Security Analysis of Two-phase Key Exchange Protocols in TPM 2.0
A New Security Definition for Public Key Encryption Schemes and Its Applications
A Zero-Knowledge Version of vSQL
Practical Improvement to Gaudry-Schost Algorithm on Subgroups of ℤ * p
Enhanced Biometrics-based Remote User Authentication Scheme Using Smart Cards
Context-Dependent Threshold Decryption and its Applications
AgentCrypt: Advancing Privacy and (Secure) Computation in AI Agent Collaboration
MALARIA: Management of Low-Latency Routing Impact on Mix Network Anonymity (Extended Version)
Inversion of Several Field Elements: A New Parallel Algorithm
A Probabilistic Public Key Encryption Scheme Based on Quartic Reciprocity (Draft V1.1)
Optimal Succinct Arguments via Hidden Order Groups
Don't forget the constant-time in CSURF
On the (Not So) Surprising Impact of Multi-Path Payments on Performance and Privacy in the Lightning Network
Non-Applicability of Pseudobasis for Designing Perfectly Secure Message Transmission Protocols Against Non-Threshold Adversary
CT-LLVM: Automatic Large-Scale Constant-Time Analysis
s(n) An Arithmetic Function of Some Interest, and Related Arithmetic
Attacks on Encrypted Range Search Schemes in Multiple Dimensions
Detecting Large Integer Arithmetic for Defense Against Crypto Ransomware
Boolean functions for homomorphic-friendly stream ciphers
Identity-Based Encryption with Security against the KGC: A Formal Model and Its Instantiations
QC-MDPC decoders with several shades of gray
Origami: Fold a Plonk for Ethereum's VDF
A note on short invertible ring elements and applications to cyclotomic and trinomials number fields
Group Signatures with Designated Traceability over Openers' Attributes
Low Cost Security: Explicit Formulae for Genus 4 Hyperelliptic Curves
Physical Turing Machines and the Formalization of Physical Cryptography
Matchmaker: Fast Secure Inference across Deployment Scenarios
A New Framework for Fast Homomorphic Matrix Multiplication
Computing Orientations from the Endomorphism Ring of Supersingular Curves and Applications
Regulating the Pace of von Neumann Correctors
On the use of continued fractions for stream ciphers
On the construction of S-boxes using the leaders and followers metaheuristic
Multi-Splitting Forking Based Modular Security of Signatures in Multivariate Quadratic Setting
A study of Pair Encodings: Predicate Encryption in prime order groups
A new signature scheme based on (U|U+V) codes
Multivariate Commitments and Signatures with Efficient Protocols
SoK: Secure Computation over Secret Shares
A Note on "Reduction Modulo 2 448 -2 224 -1"
Reducing RFID Reader Load with the Meet-in-the-Middle Strategy
A Survey on the Evolution of Cryptographic Protocols in ePassports
On the security of another CRC based ultralightweight RFID authentication protocol
SNOW-SCA: ML-assisted Side-Channel Attack on SNOW-V
Formal Analysis of Non-profiled Deep-learning Based Side-channel Attacks
Various Security Analysis of a pfCM-MD Hash Domain Extension and Applications based on the Extension
Threshold Fully Homomorphic Encryption and Secure Computation
A Shorter Group Signature with Verifier-Location Revocation and Backward Unlinkability
Security Proof for Shengbao Wang's Identity-Based Encryption Scheme
Securing Credential Sequence Verification
Publicly Verifiable Software Watermarking
Treatment of the Initial Value in Time-Memory-Data Tradeoff Attacks on Stream Ciphers
A polynomial-time attack on instances of M-SIDH and FESTA
A Fast Characterization Method for Optical Fault Injection
The Complexity Analysis of the MutantXL Family
Untraceability of Two Group Signature Schemes
Integrity-Aware Parallelizable Cipher Feedback Mode for Real-time Cryptography
A Note on the Post-Quantum Security of (Ring) Signatures
Accelerating Polynomial Multiplication for RLWE using Pipelined FFT
Indistinguishable Predicates: A New Tool for Obfuscation
Adjacency Graphs, Irreducible Polynomials and Cyclotomy
Optimal Good-Case Latency for Sleepy Consensus
Where are you Bob? Privacy-Preserving Proximity Testing with a Napping Party
Evaluation Methods for Chebyshev Polynomials
Tight Quantum Security Bound of the 4-Round Luby-Rackoff Construction
Two is Greater than One
CacheZoom: How SGX Amplifies The Power of Cache Attacks
A Key Leakage Preventive White-box Cryptographic Implementation
Non-Interactive and Information-Theoretic Secure Publicly Verifiable Secret Sharing
SWiM: Secure Wildcard Pattern Matching From OT Extension
An Algebraic Approach to Circulant Column Parity Mixers
How to Sequentialize Independent Parallel Attacks?
LucidiTEE: Policy-based Fair Computing at Scale
State convergence in bit-based stream ciphers
Identity-Based Higncryption
An Empirical Study towards Refining the AKS Primality Testing Algorithm
Another approach to pairing computation in Edwards coordinates
New construction of single-cycle T-function families
Fast hashing onto elliptic curves over fields of characteristic 3
Analytic Toolbox for White-Box Implementations: Limitation and Perspectives
M-SIDH and MD-SIDH: countering SIDH attacks by masking information
Bridging Machine Learning and Cryptanalysis via EDLCT
On the Primitivity of Trinomials over Small Finite Fields
Exploiting signature leakages: breaking Enhanced pqsigRM
Game-Theoretic Framework for Integrity Veri cation in Computation Outsourcing
SCALLOP: scaling the CSI-FiSh
CHECKER: On-site checking in RFID-based supply chains
A new approach based on quadratic forms to attack the McEliece cryptosystem
Hybrid Post-Quantum Signatures in Hardware Security Keys
Impossible Differential Cryptanalysis of ARIA and Camellia
More Optimizations to Sum-Check Proving
Modified Cache Template Attack on AES
Modular Forms and Hecke Operators for Post-Quantum Cryptography
Complete Attack on RLWE Key Exchange with reused keys, without Signal Leakage
Improved Collision Attack on MD4
A Practical Cryptanalysis of WalnutDSA
Efficient Card-Based Millionaires' Protocols via Non-Binary Input Encoding
Adaptive Robustness of Hypergrid Johnson-Lindenstrauss
Good things come to those who wait: Dishonest-Majority Coin-Flipping Requires Delay Functions
Fractal Hash Sequence Representation and Traversal
Security of Fixed-Weight Repetitions of Special-Sound Multi-Round Proofs
Indistinguishability Obfuscation from Bilinear Maps and Block-Wise Local PRGs
How to Prove the Security of Practical Cryptosystems with Merkle-Damgård Hashing by Adopting Indifferentiability
Accumulators from Bilinear Pairings and Applications to ID-based Ring Signatures and Group Membership Revocation
BASALISC: Flexible Asynchronous Hardware Accelerator for Fully Homomorphic Encryption
Automatic Enumeration of (Related-key) Differential and Linear Characteristics with Predefined Properties and Its Applications
Fast exponentiation via prime finite field isomorphism
Delegatable Anonymous Credentials From Mercurial Signatures With Stronger Privacy
Non-Interactive Zero-Knowledge in Pairing-Free Groups from Weaker Assumptions
Fully Secure and Succinct Attribute Based Encryption for Circuits from Multi-linear Maps
Security analysis of the variant of the self-shrinking generator proposed at ICISC 2006
The GGM PRF is a Weakly One-Way Family of Functions
Construction of Rotation Symmetric Boolean Functions with Maximum Algebraic Immunity on Odd Number of Variables
Isogenies and the Discrete Logarithm Problem on Jacobians of Genus 3 Hyperelliptic Curves
Between a Rock and a Hard Place: Interpolating Between MPC and FHE
Non-Wafer-Scale Sieving Hardware for the NFS: Another Attempt to Cope with 1024-bit
SASTA: Ambushing Hybrid Homomorphic Encryption Schemes with a Single Fault
Optimally Secure TBC Based Accordion Mode
New Limits for AES Known-Key Distinguishers
(Nearly) round-optimal black-box constructions of commitments secure against selective opening attacks
Attack on Private Signature Keys of the OpenPGP Format, PGP(TM) Programs and Other Applications Compatible with OpenPGP
Designing Efficient and Flexible NTT Accelerators
Provable Security of Substitution-Permutation Networks
Rate-Optimizing Compilers for Continuously Non-Malleable Codes
Robust MPC: Asynchronous Responsiveness yet Synchronous Security
Four Neighbourhood Cellular Automata as Better Cryptographic Primitives
Yet Another MicroArchitectural Attack: Exploiting I-cache
Sequential message authentication code without random oracles
CPA on Hardware Implementation of COLM Authenticated Cipher and Protect it with DOM Masking Scheme
A note on machine learning applied in ransomware detection
Cryptanalysis of a New Additive Homomorphic Encryption based on the co-ACD Problem
Reviewing ISO/IEC Standard for Time-stamping Services
Custom Instruction Support for Modular Defense against Side-channel and Fault Attacks
Ordered Multisignatures and Identity-Based Sequential Aggregate Signatures, with Applications to Secure Routing
Leakage-Free Enhanced Private Set Union for Balanced and Unbalanced Scenarios
VMPC-MAC: A Stream Cipher Based Authenticated Encryption Scheme
Privacy-Preserving Distributed Machine Learning based on Secret Sharing
Does Pseudo-basis Extend to General Adversary?
A Framework for Efficient Quantum Implementations of Linear Layers
New Signature Scheme Using Conjugacy Problem
Differential-Algebraic Algorithms for the Isomorphism of Polynomials Problem
An Efficient Public-Key Searchable Encryption Scheme Secure against Inside Keyword Guessing Attacks
Asynchronous Verifiable Secret Sharing and Proactive Cryptosystems
Information-theoretic MPC with Constant Communication Overhead
Chocobo: Creating Homomorphic Circuit Operating with Functional Bootstrapping in basis B
A Generalization of the Rainbow Band Separation Attack and its Applications to Multivariate Schemes
Secure Multiparty AES (full paper)
PAC Learning of Arbiter PUFs
Keccacheck: towards a SNARK friendly Keccak
SPN-Hash: Improving the Provable Resistance Against Differential Collision Attacks
Linear Complexity of A Family of Binary pq2 -periodic Sequences From Euler Quotients
An Efficient Hash Function for Imaginary Class Groups
A Multireceiver Certificateless Signcryption (MCLS) Scheme
Designing Optimal Implementations of Linear Layers (Full Version)
A Novel Multi-factor ID-based Designated Verifier Signature scheme
Message Modification for Step 21-23 on SHA-0
On the Limits of Consensus under Dynamic Availability and Reconfiguration
A New Crypto-Classifier Service for Energy Efficiency in Smart Cities
Proposal on Personal Authentication System in which Biological Information is embedded in Cryptosystem Key
Preventing Adaptive Key Recovery Attacks on the Gentry-Sahai-Waters Leveled Homomorphic Encryption Scheme
Preimage Security of KNOT-Hash
Cryptanalysis of an Image Scrambling Scheme without Bandwidth Expansion
Private Set Intersection from TFHE for Cloud Computing Scenarios
Round-Efficient Perfectly Secure Message Transmission Scheme Against General Adversary
VCVio: A Formally Verified Forking Lemma and Fiat-Shamir Transform, via a Flexible and Expressive Oracle Representation
Faster Homomorphic Function Evaluation using Non-Integral Base Encoding
Efficient Sparse Merkle Trees: Caching Strategies and Secure (Non-)Membership Proofs
Non-interactive Anonymous Tokens with Private Metadata Bit
Zero-Knowledge Polynomial Commitment in Binary Fields
Cryptographic Analysis of the 3GPP AKA Protocol
Glass-Vault: A Generic Transparent Privacy-preserving Exposure Notification Analytics Platform
On the Indifferentiable Hash Functions in the Multi-Stage Security Games
PriSrv+: Privacy and Usability-Enhanced Wireless Service Discovery with Fast and Expressive Matchmaking Encryption
Post-Quantum Multi-Message Public Key Encryption from Extended Reproducible PKE
Homomorphic Polynomial Public Key Cryptography for Quantum-secure Digital Signature
SoK: Privacy-Preserving Transactions in Blockchains
The propagation game: on simulatability, correlation matrices, and probing security
Attribute-based Keyed (Fully) Homomorphic Encryption
Enhancing the Dual Attack against MLWE: Constructing More Short Vectors Using Its Algebraic Structure
Scooby: Improved Multi-Party Homomorphic Secret Sharing Based on FHE
Finding collisions for MD4 hash algorithm using hybrid algorithm
Broadcast Encryption with Random Key Pre-distribution Schemes
Secure Multi-party Computation: How to Solve the Problem between Security Intelligence & Business Intelligence
Constant Communication Oblivious RAM
Just How Secure is SRP, Really?
The authenticated encryption schemes Kravatte-SANE and Kravatte-SANSE
The Bitcoin Cash Backbone Protocol
InSIDH: a Simplification of SiGamal
InstaRand: Instantly Available and Instantly Verifiable On-chain Randomness
Security Proofs for an Efficient Password-Based Key Exchange
A new elliptic curve point compression method based on $\mathbb{F}_{\!p}$-rationality of some generalized Kummer surfaces
From Extractable Collision Resistance to Succinct Non-Interactive Arguments of Knowledge, and Back Again
Practical Proofs of Parsing for Context-free Grammars
Adaptive key recovery attacks on NTRU-based somewhat homomorphic encryption schemes
Noise-Tolerant Plaintext-Checking Oracle Attacks - A Soft-Analytic Approach Applied to ML-KEM
HoneyBadgerMPC and AsynchroMix: Practical AsynchronousMPC and its Application to Anonymous Communication
Privacy-Preserving Breadth-First-Search and Maximal-Flow
Quantum Implementation and Resource Estimates for RECTANGLE and KNOT
More Efficient Constant-Round Multi-Party Computation from BMR and SHE
TMVP-based Polynomial Convolution for Saber and Sable on GPU using CUDA-cores and Tensor-cores
Tiresias: Large Scale, Maliciously Secure Threshold Paillier
Homomorphic SIM 2 D Operations: Single Instruction Much More Data
Probabilistic Infinite Secret Sharing
A Note on the (Im)possibility of Verifiable Delay Functions in the Random Oracle Model
An Optimized Quantum Implementation of ISD on Scalable Quantum Resources
Nonce-encrypting AEAD Modes with Farfalle
On the Relationships between Different Methods for Degree Evaluation (Full Version)
Optimized Software Implementations for theLightweight Encryption Scheme ForkAE
Tight Multi-User Security of CCM and Enhancement by Tag-Based Key Derivation Applied to GCM and CCM
Division Algorithm to search for monic irreducible polynomials over extended Galois Field GF(p^q)
Reduction from Module-SIS to Ring-SIS Under Norm Constraint of Ring-SIS
Ciphertext Forgery on HANUMAN
TI-PUF: Toward Side-Channel Resistant Physical Unclonable Functions
SoK: Getting started with open-source fault simulation tools
A Step Towards QC Blind Signatures
On the Boolean functions With Maximum Possible Algebraic Immunity : Construction and A Lower Bound of the Count
Studying Bitcoin privacy attacks and their Impact on Bitcoin-based Identity Methods
Popping "R-propping": breaking hardness assumptions for matrix groups over F_{2^8}
Challenges in Proving Post-Quantum Key Exchanges Based on Key Encapsulation Mechanisms
Your Rails Cannot Hide From Localized EM: How Dual-Rail Logic Fails on FPGAs
The Availability-Accountability Dilemma and its Resolution via Accountability Gadgets
The best and worst of supersingular abelian varieties in cryptology