POKEx：POKE密钥交换与SIDH变体的性能分析
POKEx: Performance analysis of POKE-key exchange and SIDH-variants
AI总结：
本文将2025年Eurocrypt提出的POKE适配为密钥交换算法，与M-SIDH、terSIDH、CSIDH对比，针对NIST安全等级1的性能显示其速度远超同类方案，是当前最具潜力的基于同源的密钥交换候选。
AI中文摘要：
本文对基于POKE的密钥交换协议及SIDH变体进行了对比性能分析。SIDH因密钥尺寸小、性能高效受到关注，已被选为NIST后量子密码（PQC）第四轮的备选候选方案。但2022年Castryck和Decru提出密钥恢复攻击后，SIDH被证实易受经典计算机上的多项式时间攻击，安全性受损，不再被考虑。鉴于SIDH曾被视为领先的基于同源的算法，研究人员提出了MSIDH、MD-SIDH、bin/terSIDH等多种对策，但这些方案仍存在性能局限。与此同时，Basso和Maino在2025年欧洲密码学会议（Eurocrypt 2025）上提出的POKE是一种基于同源的公钥加密方案，它结合了类SIDH协议与高维同源，因性能高效受到关注。本研究将POKE适配为密钥交换算法，并与M-SIDH、terSIDH、CSIDH进行基准测试。针对NIST安全等级1，基于POKE的密钥封装机制（KEM）的速度约为terSIDH的21.21倍，是CSIDH的64.97倍，表明基于POKE的KEM是当前最具潜力的基于同源的密钥交换候选方案。
英文摘要：
In this paper, we present a comparative performance analysis of the POKE-based key exchange and SIDH variants. SIDH gained attention for its small key size and efficient performance, and has been selected as an alternate candidate in NIST PQC Round 4. However, following the key recovery attack by Castryck and Decru in 2022, SIDH was shown to be vulnerable to polynomial-time attacks on classical computers, undermining its security and removing it from consideration. Given that SIDH was regarded as the leading isogeny-based algorithm, several countermeasures, such as MSIDH, MD-SIDH, and bin/terSIDH have been proposed. However, these approaches still face performance limitations. Meanwhile, POKE, proposed by Basso and Maino at Eurocrypt 2025, is an isogeny-based public key encryption scheme that combines a SIDH-like protocol with higher-dimensional isogenies and has drawn attention for its efficient performance. In this work, we adapt POKE into a key exchange algorithm and benchmark it against M-SIDH, terSIDH, and CSIDH. Targeting NIST security level 1, POKE-based KEM is approximately 21.21 times faster than terSIDH and 64.97 times faster than CSIDH, showing that the POKE-based KEM is currently the most promising isogeny-based key exchange candidate.
