### Efficient and Generalized Pairing Computation on Abelian Varieties

Eunjeong Lee, Hyang-Sook Lee, and Cheol-Min Park

##### Abstract

In this paper, we propose a new method for constructing a bilinear pairing over (hyper)elliptic curves, which we call the R-ate pairing. This pairing is a generalization of the Ate and Ate_i pairing, and also improves efficiency of the pairing computation. Using the R-ate pairing, the loop length in Miller's algorithm can be as small as ${\rm log}(r^{1 / \phi(k)})$ for some pairing-friendly elliptic curves which have not reached this lower bound. Therefore we obtain from 29 % to 69 % savings in overall costs compared to the Ate_i pairing. On supersingular hyperelliptic curves of genus 2, we show that this approach makes the loop length in Miller's algorithm shorter than that of the Ate pairing.

Available format(s)
Category
Public-key cryptography
Publication info
Published elsewhere. Unknown where it was published
Keywords
pairingelliptic curveshyperelliptic curvespairing based cryptographyTate pairing
Contact author(s)
ejlee @ kias re kr
History
Short URL
https://ia.cr/2008/040

CC BY

BibTeX

@misc{cryptoeprint:2008/040,
author = {Eunjeong Lee and Hyang-Sook Lee and Cheol-Min Park},
title = {Efficient and Generalized Pairing Computation on Abelian Varieties},
howpublished = {Cryptology ePrint Archive, Paper 2008/040},
year = {2008},
note = {\url{https://eprint.iacr.org/2008/040}},
url = {https://eprint.iacr.org/2008/040}
}

Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.