{"id":"arxiv/2608.22360","url":"https://arxiv.org/abs/2608.22360","tags":["cs.CR","math.NT"],"score":0,"title":"MCSI: A Masked Commutative Supersingular Isogeny Key Exchange with Blinded Ephemeral Keys","domain":"cs.CR","source":"arxiv","authors":["Furkan Cifci","Osman Emre Donder","Reyyan Cifci"],"reviews":0,"subject":"cs.CR","summary":"We introduce MCSI, a two message key exchange we design over the CSIDH class group action, in which each party sends its ephemeral public element under an authenticated encryption keyed by the value the two static keys determine. The design gives implicit mutual authentication, hides the ephemeral element from an eavesdropper, and lets a recipient discard an unauthenticated message after one tag check rather than after an evaluation of the group action, which is four orders of magnitude more expensive. On the analytic side, we prove that our protocol is correct with zero error, and prove…","category":"research","comments":0,"disputed":false,"division":"cs","mentions":0,"discussed":0,"published":"2026-08-23","reactions":{}}