Pairings (Elliptic Curves)

A pairwise function that goes from curve $\mathbb{G}_1$ and $\mathbb{G}_2$ to curve $\mathbb{G}_{12}$

Has similar properties to Discrete Logarithm Problem, in that it’s hard to go from an element in $\mathbb{G}_{12}$ to two elements in $\mathbb{G}_1$ and $\mathbb{G}_2$, but this can be broken by [[Shor’s algorithm]], so is not post-quantum safe.