Cryptology ePrint Archive: Report 2018/193

A New Family of Pairing-Friendly elliptic curves

Michael Scott and Aurore Guillevic

Abstract: There have been recent advances in solving the finite extension field discrete logarithm problem as it arises in the context of pairing-friendly elliptic curves. This has lead to the abandonment of approaches based on super-singular curves of small characteristic, and to the reconsideration of the field sizes required for implementation based on non-supersingular curves of large characteristic. This has resulted in a revision of recommendations for suitable curves, particularly at a higher level of security. Indeed for AES-256 levels of security the BLS48 curves have been suggested, and demonstrated to be superior to other candidates. These curves have an embedding degree of 48. The well known taxonomy of Freeman, Scott and Teske only considered curves with embedding degrees up to 50. Given some uncertainty around the constants that apply to the best discrete logarithm algorithm, it would seem to be prudent to push a little beyond 50. In this note we announce the discovery of a new family of pairing friendly elliptic curves which includes a new construction for a curve with an embedding degree of 54.

Category / Keywords:

Date: received 17 Feb 2018, last revised 22 Mar 2018

Contact author: mike scott at miracl com

Available format(s): PDF | BibTeX Citation

Note: New author added. New material added.

Version: 20180322:102459 (All versions of this report)

Short URL: ia.cr/2018/193

Discussion forum: Show discussion | Start new discussion


[ Cryptology ePrint archive ]