Paper 2013/672

Easy scalar decompositions for efficient scalar multiplication on elliptic curves and genus 2 Jacobians

Benjamin Smith

Abstract

The first step in elliptic curve scalar multiplication algorithms based on scalar decompositions using efficient endomorphisms---including Gallant--Lambert--Vanstone (GLV) and Galbraith--Lin--Scott (GLS) multiplication, as well as higher-dimensional and higher-genus constructions---is to produce a short basis of a certain integer lattice involving the eigenvalues of the endomorphisms. The shorter the basis vectors, the shorter the decomposed scalar coefficients, and the faster the resulting scalar multiplication. Typically, knowledge of the eigenvalues allows us to write down a long basis, which we then reduce using the Euclidean algorithm, Gauss reduction, LLL, or even a more specialized algorithm. In this work, we use elementary facts about quadratic rings to immediately write down a short basis of the lattice for the GLV, GLS, GLV+GLS, and Q-curve constructions on elliptic curves, and for genus 2 real multiplication constructions. We do not pretend that this represents a significant optimization in scalar multiplication, since the lattice reduction step is always an offline precomputation---but it does give a better insight into the structure of scalar decompositions. In any case, it is always more convenient to use a ready-made short basis than it is to compute a new one.

Note: Submitted to the proceedings of AGCT 2013.

Metadata
Available format(s)
PDF
Category
Implementation
Publication info
Preprint. MINOR revision.
Keywords
Elliptic curve cryptographynumber theoryendomorphismsGLV
Contact author(s)
smith @ lix polytechnique fr
History
2013-10-24: received
Short URL
https://ia.cr/2013/672
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2013/672,
      author = {Benjamin Smith},
      title = {Easy scalar decompositions for efficient scalar multiplication on elliptic curves and genus 2 Jacobians},
      howpublished = {Cryptology ePrint Archive, Paper 2013/672},
      year = {2013},
      note = {\url{https://eprint.iacr.org/2013/672}},
      url = {https://eprint.iacr.org/2013/672}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.