In the digital era that is moving toward quantum computing, protecting data against hack attacks is one of our biggest challenges — and one that experts, governments, and industries worldwide work hard to address. While there is an effort to build a more connected and safe future, it can certainly learn from theorems from the past.
In July, the U.S. National Institute of Standards and Technology (NIST) selected four encryption algorithms and posed some challenging problems to test their security, offering a US$50,000 reward for whoever managed to break them. It happened in less than an hour. One of the promising algorithm candidates, named SIKE, was hacked with a single personal computer. The attack did not rely on a powerful machine, but on powerful mathematics based on a theorem developed by a Queen’s University professor decades ago.
Ernst Kani has been researching and teaching since the late 1970s — first at the University of Heidelberg, in Germany, and then at Queen’s in Ontario, Canada, where he joined the Department of Mathematics and Statistics in 1986. His main research focus is arithmetic geometry, an area of mathematics that uses the techniques of algebraic geometry to solve problems in number theory.
Fermat’s Last Theorem
The problems Dr. Kani works to solve stretch back to ancient times. His specific field of research was pioneered by Diophantus of Alexandria around 1,800 years ago and is a set of problems known as Diophantine questions. One of the most famous questions in the field is Fermat’s Last Theorem, posed by Pierre Fermat in 1637, which took the math community 350 years to prove — an accomplishment by Princeton professor Andrew Wiles in 1994. Wiles received many prizes and honors for this work, including an honorary doctorate from Queen’s in 1997.
Neither Diophantus nor Fermat dreamed of quantum computers, but Dr. Kani’s work on Diophantine questions resurfaced during the NIST round of tests. The successful hackers — Wouter Castryck and Thomas Decru, both researchers at the Katholieke Universiteit Leuven in Belgium — based their work on the “glue and split” theorem developed by the Queen’s mathematician in 1997.
As a matter of fact, Dr. Kani was not concerned about cryptographic algorithms when he developed the theorem. That work kicked off in the 1980s, in collaboration with another German mathematician, Gerhard Frey – whose work was crucial in solving Fermat’s last theorem. Drs. Kani and Frey wanted to advance research on elliptic curves, a particular kind of equation that would later be used for cryptographic purposes.
Both researchers’ goals at that time were purely theoretical. They were interested in manipulating mathematical objects to learn more about their own properties. Dr. Kani explained:
“Doing pure mathematics is an end by itself, so we don’t think of real-world applications. But, later, many of those studies are useful for different purposes. When Fermat proposed his theorem hundreds of years ago, his intent was to be able to factor certain large numbers. The application to cryptography came only much later in 1978. Basically, all the methods we use today for data encryption are based on mathematics.”
Doughnuts and curves
Mathematicians often refer to mathematics as a beautiful thing. For those who don’t work in the field, it might be challenging to see this beauty, or even to have a high-level understanding of what these research projects are all about — it requires some imagination.
Imagine an object shaped like a doughnut, with a hole in the middle. That’s a visual model of an elliptic curve, also known as a genus one curve. Drs. Kani and Frey wanted to combine two genus one curves to form a new object — a genus two curve, something we can imagine, such as two doughnuts stuck solidly together side by side. They aimed to use some properties of the constructed genus two curve to deduce certain properties of the two original genus one curves, which were “glued” together.
In his 1997 paper, Dr. Kani generalized the original construction by gluing together an arbitrary pair of elliptic curves. But in that case, the construction sometimes fails — it might construct an object in which the two doughnuts only touch each other at a single point. The paper analyzes the precise conditions for when this happens (i.e., when the construction fails or “splits”). Castryck and Decru used this characterization of the failure in their method of attacking the proposed encryption scheme SIKE. Dr. Kani said:
“Our problem had nothing to do with cryptography, which is why I was surprised when I heard of the algorithm attack. It was quite ingenious, what they did there! One of the co-authors of the SIKE algorithm expressed surprise in the fact that genus two curves could be used to gain information about elliptic curves. But this was precisely our original strategy in the 1980s and 1990s (and afterwards).”
Although cryptographers and computing engineers are not always well-versed in all the high-powered techniques of mathematics, many different skills and forms of knowledge can be combined to advance the way we store and transmit data. Dr. Kani, who continues to teach undergraduate and graduate courses and to work in arithmetic geometry — particularly on problems involving genus two curves and elliptic curves, said:
“Cryptography uses a lot of sophisticated mathematics, especially arithmetic geometry. Computing experts and math experts have to work together to advance this field.”
Provided by Catarina Chagas, Queen’s University [Note: Materials may be edited for content and length.]
Follow us on Twitter, Facebook, or Pinterest
