The Q-curve construction for endomorphism-accelerated elliptic curves

Abstract : We give a detailed account of the use of $\mathbb{Q}$-curve reductions to construct elliptic curves over $\mathbb{F}_{p^2}$ with efficiently computable endomorphisms, which can be used to accelerate elliptic curve-based cryptosystems in the same way as Gallant--Lambert--Vanstone (GLV) and Galbraith--Lin--Scott (GLS) endomorphisms. Like GLS (which is a degenerate case of our construction), we offer the advantage over GLV of selecting from a much wider range of curves, and thus finding secure group orders when \(p\) is fixed for efficient implementation. Unlike GLS, we also offer the possibility of constructing twist-secure curves. We construct several one-parameter families of elliptic curves over $\mathbb{F}_{p^2}$ equipped with efficient endomorphisms for every $p > 3$, and exhibit examples of twist-secure curves over $\mathbb{F}_{p^2}$ for the efficient Mersenne prime $p = 2^{127}-1$.
Liste complète des métadonnées

https://hal.inria.fr/hal-01064255
Contributeur : Benjamin Smith <>
Soumis le : mardi 24 mars 2015 - 10:44:46
Dernière modification le : jeudi 10 mai 2018 - 02:06:14
Document(s) archivé(s) le : jeudi 2 juillet 2015 - 06:37:03

Fichiers

smith-qcurves.pdf
Fichiers produits par l'(les) auteur(s)

Licence


Copyright (Tous droits réservés)

Identifiants

Citation

Benjamin Smith. The Q-curve construction for endomorphism-accelerated elliptic curves. Journal of Cryptology, Springer Verlag, 2016, 29 (4), pp.27. 〈http://www.springer.com/-/2/AU71qKm0mRg70md7z8yh〉. 〈10.1007/s00145-015-9210-8〉. 〈hal-01064255v2〉

Partager

Métriques

Consultations de la notice

1461

Téléchargements de fichiers

312