[Resource Topic] 2022/716: x-Superoptimal Pairings on some Elliptic Curves with Odd Prime Embedding Degrees

Welcome to the resource topic for 2022/716

Title:
x-Superoptimal Pairings on some Elliptic Curves with Odd Prime Embedding Degrees

Authors: Emmanuel Fouotsa, Azebaze Guimagang Laurian, and Ayissi Raoul

Abstract:

The choice of the elliptic curve for a given pairing based protocol is primordial. For many cryptosystems based on pairings such as group signatures and their variants (EPID, anonymous attestation, etc) or accumulators, operations in the first pairing group \mathbb{G} of points of the elliptic curve is more predominant. At 128-bit security level two curves BW13-P310 and BW19-P286 with odd embedding degrees 13 and 19 suitable for super optimal pairing have been recommended for such pairing based protocols . But a prime embedding degree (k=13;19) eliminates some important optimisation for the pairing computation. However The Miller loop length of the superoptimal pairing is the half of that of the optimal ate pairing but involve more exponentiations that affect its efficiency. In this work, we successfully develop methods and construct algorithms to efficiently evaluate and avoid heavy exponentiations that affect the efficiency of the superoptimal pairing. This leads to the definition of new bilinear and non degenerate pairing on BW13-P310 and BW19-P286 called x-superoptimal pairing wchich is about 27.3\% and 49\% faster than the optimal ate pairing previousely computed on BW13-P310 and BW19-P286 respectively.

ePrint: https://eprint.iacr.org/2022/716

See all topics related to this paper.

Feel free to post resources that are related to this paper below.

Example resources include: implementations, explanation materials, talks, slides, links to previous discussions on other websites.

For more information, see the rules for Resource Topics .