[Resource Topic] 2010/004: Halving on Binary Edwards Curves

Welcome to the resource topic for 2010/004

Title:
Halving on Binary Edwards Curves

Authors: Qiping Lin, Fangguo Zhang

Abstract:

Edwards curves have attracted great interest for their efficient addition and doubling formulas. Furthermore, the addition formulas are strongly unified or even complete, i.e., work without change for all inputs. In this paper, we propose the first halving algorithm on binary Edwards curves, which can be used for scalar multiplication. We present a point halving algorithm on binary Edwards curves in case of d_1\neq d_2. The halving algorithm costs about 3I+5M+4S, which is slower than the doubling one. We also give a theorem to prove that the binary Edwards curves have no minimal two-torsion in case of d_1= d_2, and we briefly explain how to achieve the point halving algorithm using an improved algorithm in this case. Finally, we apply our halving algorithm in scalar multiplication with \omega-coordinate using Montgomery ladder.

ePrint: https://eprint.iacr.org/2010/004

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .