Paper 2022/1052

Double-Odd Jacobi Quartic

Thomas Pornin, NCC Group

Double-odd curves are curves with order equal to 2 modulo 4. A prime order group with complete formulas and a canonical encoding/decoding process could previously be built over a double-odd curve. In this paper, we reformulate such curves as a specific case of the Jacobi quartic. This allows using slightly faster formulas for point operations, as well as defining a more efficient encoding format, so that decoding and encoding have the same cost as classic point compression (decoding is one square root, encoding is one inversion). We define the prime-order groups jq255e and jq255s as the application of that modified encoding to the do255e and do255s groups. We furthermore define an optimized signature mechanism on these groups, that offers shorter signatures (48 bytes instead of the usual 64 bytes, for 128-bit security) and makes signature verification faster (down to less than 83000 cycles on an Intel x86 Coffee Lake core).

Available format(s)
Public-key cryptography
Publication info
double-odd elliptic curves Jacobi quartic Short signatures
Contact author(s)
thomas pornin @ nccgroup com
2022-08-17: approved
2022-08-13: received
See all versions
Short URL
Creative Commons Attribution


      author = {Thomas Pornin},
      title = {Double-Odd Jacobi Quartic},
      howpublished = {Cryptology ePrint Archive, Paper 2022/1052},
      year = {2022},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.