eprint.iacr.org will be offline for approximately an hour
for routine maintenance at 11pm UTC on Tuesday, April 16. We lost some data between
April 12 and April 14, and some authors have been notified that they need to resubmit their papers.
You are looking at a specific version 20140110:092345 of this paper.
See the latest version.
Paper 2014/027
Twisting Edwards curves with isogenies
Mike Hamburg
Abstract
Edwards’ elliptic curve form is popular in modern cryptographic implementations thanks to their fast, strongly unified addition formulas. Twisted Edwards curves with a = −1 are slightly faster, but their addition formulas are not complete over Fp where p ≡ 3 (mod 4). In this short note, we propose that designers specify Edwards curves, but implement scalar multiplications and the like using an isogenous twisted Edwards curve.
Metadata
- Available format(s)
-
PDF
- Category
- Implementation
- Publication info
- Preprint. MINOR revision.
- Keywords
- twisted Edwards curvesisogeny
- Contact author(s)
- mike @ shiftleft org
- History
- 2014-01-10: received
- Short URL
- https://ia.cr/2014/027
- License
-
CC BY
