# Tag Info

The problem with supersingular elliptic curves is that they're vulnerable to transfer attacks (which reduce the elliptic curve DLP into an additive or multiplicative group DLP) as explained on Bernstein's SafeCurves page. Fortunately, it's possible to build a one-way permutation using an arbitrary elliptic curve $E$ over the field $\mathbb{F}_p$. The trick ...