Cryptology ePrint Archive: Report 2016/1187
Optimal Ate Pairing on Elliptic Curves with Embedding Degree 9,15 and 27
Emmanuel Fouotsa and Nadia El Mrabet and Aminatou Pecha
Abstract: Since the advent of pairing based cryptography, much attention has been given to efficient computation of pairings on elliptic curves with even embedding degrees. The few works that exist in the case of odd embedding degrees require some improvements.
This paper considers the computation of optimal ate pairings on elliptic curves of embedding degrees k=9, 15 and 27 which have twists of order three. Mainly, we provide a detailed arithmetic and cost estimation of operations in the tower field of the corresponding extension fields. A good selection of parameters at the $128$, $192$ and $256$-bits security level enables us to improve the theoretical cost for the Miller step and the final exponentiation using the lattice-based method comparatively to the previous few works that exist in these cases. In particular for k=15 we obtain an improvement up to $25\%$ in the computation of the final exponentiation.
Category / Keywords: Elliptic Curves, Optimal Pairings , Miller's algorithm , Extension fields arithmetic , Final exponentiation
Date: received 29 Dec 2016
Contact author: emmanuelfouotsa at yahoo fr
Available format(s): PDF | BibTeX Citation
Version: 20170101:153458 (All versions of this report)
Short URL: ia.cr/2016/1187
Discussion forum: Show discussion | Start new discussion
[ Cryptology ePrint archive ]