> For the complete documentation index, see [llms.txt](https://the-winrars.gitbook.io/writeups/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://the-winrars.gitbook.io/writeups/2021-writeups/union-ctf/why-is-a-raven.md).

# Why is a raven

The script implements the SIDH key exchange scheme. If we look into more detail, it gives us a bit more information: ϕ\_A(P\_A).xy(), ϕ\_A(Q\_A).xy() the kernel of ϕ\_A is P\_A + Q\_A *k\_A, and so ϕ\_A(P\_A) + k\_A* ϕ\_A(Q\_A) = 0 this means we can solve for k\_A, and since the order of the subgroup is 2^216, discrete log is easy to do

sage go brrr or something i need to study this more