We study the Newton polygon jumping locus of a Mumford family in char p. Our main result says that, under a mild assumption on p, the jumping locus consists of only supersingular points and its cardinality is equal to (p^r − 1)(g − 1), where r is the degree of the defining field of the base curve of a Mumford family in char p and g is the genus of the curve. The underlying technique is the p-adic Hodge theory.

In this paper, we present a practical and provably secure two-pass authenticated key exchange protocol over ideal lattices, which is conceptually simple and has similarities to the Diffie-Hellman based protocols such as HMQV (CRYPTO 2005) and OAKE (CCS 2013). Our method does not involve other cryptographic primitives—in particular, it does not use signatures—which simplifies the protocol and enables us to base the security directly on the hardness of the ring learning with errors problem. The security is proven in the Bellare-Rogaway model with weak perfect forward secrecy in the random oracle model. We also give a one-pass variant of our two-pass protocol, which might be appealing in specific applications. Several concrete choices of parameters are provided, and a proof-of-concept implementation shows that our protocols are indeed practical.

No abstract uploaded!

No abstract uploaded!

No abstract uploaded!