2002 | Paulo S.L.M. Barreto, Hae Y. Kim, Ben Lynn, and Michael Scott
This paper presents efficient algorithms for implementing pairing-based cryptosystems, particularly focusing on the Tate pairing. The authors describe new algorithms that significantly improve the performance of pairing evaluation, especially in characteristic 3, achieving a speedup of about 55 times compared to previous methods. They also propose faster algorithms for scalar multiplication in characteristic 3 and square root extraction over $ F_{p^{m}} $, which are useful beyond pairing-based cryptography.
The paper introduces point tripling for supersingular elliptic curves over $ F_{3^{m}} $, which can be computed in $ O(m) $ steps, much faster than conventional point doubling. A faster point addition algorithm is also proposed for normal basis representation. These operations lead to a significantly faster scalar multiplication algorithm in characteristic 3.
An algorithm for computing square roots over $ F_{p^{m}} $ is presented, which runs in $ O(m^{2}\log m) $ steps, improving upon previous methods that required $ O(m^{3}) $ steps. This operation is important for point compression techniques.
A deterministic variant of Miller's algorithm is proposed for computing the Tate pairing, which avoids many irrelevant operations in the conventional algorithm when one of the pairing's arguments is restricted to a base field. This leads to a complexity reduction from $ O(m^{3}) $ to $ O(m^{2}) $ steps in characteristics 2 and 3.
The paper also discusses the use of MNT curves, which are ordinary elliptic curves with embedding degrees up to 6, and their suitability for pairing-based cryptosystems that do not involve distortion maps.
Experimental results show that the proposed algorithms significantly improve the performance of pairing-based cryptosystems, with the Tate pairing computation being the most time-consuming operation. The results demonstrate that the new algorithms lead to faster implementations, making pairing-based cryptosystems more practical.This paper presents efficient algorithms for implementing pairing-based cryptosystems, particularly focusing on the Tate pairing. The authors describe new algorithms that significantly improve the performance of pairing evaluation, especially in characteristic 3, achieving a speedup of about 55 times compared to previous methods. They also propose faster algorithms for scalar multiplication in characteristic 3 and square root extraction over $ F_{p^{m}} $, which are useful beyond pairing-based cryptography.
The paper introduces point tripling for supersingular elliptic curves over $ F_{3^{m}} $, which can be computed in $ O(m) $ steps, much faster than conventional point doubling. A faster point addition algorithm is also proposed for normal basis representation. These operations lead to a significantly faster scalar multiplication algorithm in characteristic 3.
An algorithm for computing square roots over $ F_{p^{m}} $ is presented, which runs in $ O(m^{2}\log m) $ steps, improving upon previous methods that required $ O(m^{3}) $ steps. This operation is important for point compression techniques.
A deterministic variant of Miller's algorithm is proposed for computing the Tate pairing, which avoids many irrelevant operations in the conventional algorithm when one of the pairing's arguments is restricted to a base field. This leads to a complexity reduction from $ O(m^{3}) $ to $ O(m^{2}) $ steps in characteristics 2 and 3.
The paper also discusses the use of MNT curves, which are ordinary elliptic curves with embedding degrees up to 6, and their suitability for pairing-based cryptosystems that do not involve distortion maps.
Experimental results show that the proposed algorithms significantly improve the performance of pairing-based cryptosystems, with the Tate pairing computation being the most time-consuming operation. The results demonstrate that the new algorithms lead to faster implementations, making pairing-based cryptosystems more practical.