Improving the Complexity of Index Calculus Algorithms in Elliptic Curves over Binary Fields

Jean-Charles Faugère 1, 2 Ludovic Perret 1, 2 Christophe Petit 3 Guénaël Renault 1, 2
1 Systèmes Polynomiaux / Inria - LIP6 - PolSys
LIP6 - Laboratoire d'Informatique de Paris 6, INRIA
3 UCL Crypto Group
DICE - MLG - Dispositifs Intégrés et Circuits Electroniques Machine Learning Group
Abstract : The goal of this paper is to further study the index calculus method that was first introduced by Semaev for solving the ECDLP and later developed by Gaudry and Diem. In particular, we focus on the step which consists in decomposing points of the curve with respect to an appropriately chosen factor basis. This part can be nicely reformulated as a purely algebraic problem consisting in finding solutions to a multivariate polynomial $f (x1 , . . . , xm ) = 0$ such that $x_1 , . . . , x_m$ all belong to some vector subspace of $F_2^n /F_2$ . Our main contribution is the identification of particular structures inherent to such polynomial systems and a dedicated method for tackling this problem. We solve it by means of Gröbner basis techniques and analyze its complexity using the multi-homogeneous structure of the equations. A direct consequence of our results is an index calculus algorithm solving ECDLP over any binary field $F_2^n$ in time $O(2^{ω t} )$, with $t ≈ n/2$ (provided that a certain heuristic assumption holds). This has to be compared with Diem's [14] index calculus based approach for solving ECDLP over Fqn which has complexity exp O(n log(n)1/2 ) for q = 2 and n a prime (but this holds without any heuristic assumption). We emphasize that the complexity obtained here is very conservative in comparison to experimental results. We hope the new ideas provided here may lead to efficient index calculus based methods for solving ECDLP in theory and practice.
Document type :
Conference papers
Eurocrypt'2012, Apr 2012, Cambridge, United Kingdom. Springer, 7237, pp.27-44, 2012, LNCS. <10.1007/978-3-642-29011-4_4>


https://hal.inria.fr/hal-00776066
Contributor : Ludovic Perret <>
Submitted on : Monday, January 14, 2013 - 11:02:35 PM
Last modification on : Wednesday, January 21, 2015 - 4:43:39 PM

File

MAYA2-UPMCINRIA-aaec_1.0.pdf
fileSource_public_author

Identifiers

Collections

Citation

Jean-Charles Faugère, Ludovic Perret, Christophe Petit, Guénaël Renault. Improving the Complexity of Index Calculus Algorithms in Elliptic Curves over Binary Fields. Eurocrypt'2012, Apr 2012, Cambridge, United Kingdom. Springer, 7237, pp.27-44, 2012, LNCS. <10.1007/978-3-642-29011-4_4>. <hal-00776066>

Export

Share

Metrics

Consultation de
la notice

218

Téléchargement du document

96