[Resource Topic] 2007/045: A Coprocessor for the Final Exponentiation of the $\eta_T$ Pairing in Characteristic Three

Welcome to the resource topic for 2007/045

Title:
A Coprocessor for the Final Exponentiation of the \eta_T Pairing in Characteristic Three

Authors: Jean-Luc Beuchat, Nicolas Brisebarre, Masaaki Shirase, Tsuyoshi Takagi, Eiji Okamoto

Abstract:

Since the introduction of pairings over (hyper)elliptic curves in constructive cryptographic applications, an ever increasing number of protocols based on pairings have appeared in the literature. Software implementations being rather slow, the study of hardware architectures became an active research area. Beuchat et al. proposed for instance a coprocessor which computes the characteristic three \eta_T pairing, from which the Tate pairing can easily be derived, in 33,$\mu$s on a Cyclone II FPGA. However, a final exponentiation is required to ensure a unique output value and the authors proposed to supplement their \eta_T pairing accelerator with a coprocessor for exponentiation. Thus, the challenge consists in designing the smallest possible piece of hardware able to perform this task in less than 33,$\mu$s on a Cyclone~II device. In this paper, we propose a novel arithmetic operator implementing addition, cubing, and multiplication over \mathbb{F}_{3^{97}} and show that a coprocessor based on a single such operator meets this timing constraint.

ePrint: https://eprint.iacr.org/2007/045

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .