Elliptic curves in Huff’s model

Hardware acceleration of cryptographic algorithms is beneficial because considerable performance improvements can be attained compared to software implementations. Thus, hardware implementations can be used in critical applications requiring high encryption or decryption speeds. Parallel architecture with efficient hardware implementation of Galois field arithmetic operations is used to produce high speed computation time for the scalar multiplication operation which is the main operation in Elliptic Curve Cryptography (ECC) system. This work proposed a modification in karatsuba-ofman algorithm which is one of the best algorithms used to perform multiplication operation over Galois field. The modification contrasted on truncating karatsuba-ofman algorithm in a low level and using the classic polynomial multiplication algorithm. In addition, this work proposed architecture for implementing ECC on hardware using Montgomery algorithm in projective coordinates. The results show that the proposed architecture is able to compute GF(2^191) elliptic curve scalar multiplication operations in 72.939 μs on Xilinx Virtex-II XC2V6000 FPGA device and 100.68 μs on Xilinx VirtexE 2600. Also, the proposed architecture can be changed to be suitable for any arbitrary Galois field size with little modifications.KeywordsGalois fieldElliptic curve cryptographyKaratsuba-Ofman multiplierfield programmable gate arrayspolynomial multiplicationpolynomial inversion

Using the reduction theory of Nrron we give necessary conditions for the existence of points of order q on elliptic curves E rational over global fields. An application is the determination of all elliptic cu rves /Q with integer j and torsion points, generalizing Olson [8]. Another application is a theorem about semistable reduction whose consequences generalize a theorem of Olson [9] ( K = Q) and give divisibility conditions for the discriminant and the coefficients of E related with the paper of Zimmer [13] as well as diophantine equations related with Fermat's equation that are discussed for K Q and K a function field. We are interested in elliptic curves over global fields K (i.e. : K is a finite number field or K is a function field of one variable over a finite field) and especially in the torsion group of E(K), where E(K) is the group of K-rational points of E. It is well known that E(K) is finitely generated, it is conjectured that if K is a number field then the order of the torsion group of E(K) is bounded by some number depending only on K (cf. Demjanenko [1]). In any case in order to handle with E(K) the first step is to determine the torsion group. In principle this is not so difficult; if one uses the results of Lutz [6] and Zimmer [13], one sees immediately that for every E there exist points of q-power-order only for a finite number of primes q, as the equations for points of order q are known (in principle) one has only t ~ test what orders really occur. But as the computational work grows very rapidly with q it is usefull to look for sharper necessary conditions, and this shall be done in this paper.

Recently, the weight distributions of the duals of the cyclic codes with two zeros have been obtained for several cases in Ding et al. (IEEE Trans Inform Theory 57(12), 8000–8006, 2011); Ma et al. (IEEE Trans Inform Theory 57(1):397–402, 2011); Wang et al. (Trans Inf Theory 58(12):7253–7259, 2012); and Xiong (Finite Fields Appl 18(5):933–945, 2012). In this paper we use the method developed in Xiong (Finite Fields Appl 18(5):933–945, 2012) to solve one more special case. We make extensive use of standard tools in number theory such as characters of finite fields, the Gauss sums and the Jacobi sums. The problem of finding the weight distribution is transformed into a problem of evaluating certain character sums over finite fields, which turns out to be associated with counting the number of points on some elliptic curves over finite fields. We also treat the special case that the characteristic of the finite field is 2.

A high performance GF(2/sup k/) elliptic curve crypto processor architecture suitable for multimedia security is proposed. To meet the high data rates of multimedia, the new architecture exploits parallelism within elliptic curve point operations after using projective coordinates. In this paper, the decision on which projective coordinate to use is based on its efficiency with regard to its parallel implementation. Two different projective coordinates are compared here. This parallelism is exploited in the new architecture by using three separate bit-level pipelined digit serial-parallel multipliers that can operate in parallel. It is worth pointing that such multipliers are ideally suited for the repetitive multiplications inherent in elliptic curve cryptography. it is believed that such high performance architectures are needed for high end servers that need to support the security of many multimedia streams at the same time.

Operations of Points on Elliptic Curve in Projective Coordinates In this article, we formalize operations of points on an elliptic curve over GF(p). Elliptic curve cryptography [7], whose security is based on a difficulty of discrete logarithm problem of elliptic curves, is important for information security. We prove that the two operations of points: compellProjCo and addellProjCo are unary and binary operations of a point over the elliptic curve.

The work presents an elliptic curve crypto accelerator to implement scalar multiplication on standardized NIST curve over Galois binary fields by using polynomial basis. The proposed design provides efficient hardware utilization and low power consumption. For this purpose, hybrid finite field multiplier is proposed using standard Karatsuba multiplier and shlft-and-add multiplication algorithms. The proposed hybrid finite field multiplier can perform one finite field multiplication in $\frac{m}{2}$ clock cycles, with m being the key-length. Montgomery algorithm with projective coordinates (LopezDahab) is used for the computation of scalar multiplication. An FSM based control unit is developed, governing the overall operations of proposed accelerator. The proposed architecture has been modeled in Verilog-HDL and implemented up to place and route level using the Xilinx Vivado and ISE design software for various FPGA devices. The achieved results demonstrate the convenience of proposed ECC accelerator for resource constrained embedded systems applications requiring low area and low power hardware.

Recently there are lots of studies on the Tate pairing computation with different coordinate systems, such as twisted Edwards curves and Hessian curves coordinate systems. However, Jacobi intersections curves coordinate system, as another useful one, is overlooked in pairing-based cryptosystems.This paper proposes the explicit formulae for the doubling and addition steps in Miller’s algorithm to compute the Tate pairing on twisted Jacobi intersections curves, as a larger class containing Jacobi intersections curves. Although these curves are not plane elliptic curves, our formulae are still very efficient and competitive with others. When the embedding degree is even, our doubling formulae are the fastest except for the formulae on Hessian/Selmer curves, and the parallel execution of our formulae are even more competitive with the Selmer curves case in the parallel manner. Besides, we give the detailed analysis of the fast variants of our formulae with other embedding degrees, such as the embedding degree 1, and the embedding degree dividing 4 and 6. At last, we analyze the relation between the Tate pairings on two isogenous elliptic curves, and show that the Tate pairing on twisted Jacobi intersections curves can be substituted for the Tate pairing on twisted Edwards curves completely.KeywordsTwisted Jacobi intersections curvesTate pairingMiller’s function

Faster computation of the Tate pairing

In this paper, we consider a version of the bias conjecture for second moments in the setting of elliptic curves over finite fields whose trace of Frobenius lies in a fixed arithmetic progression. Contrary to the classical setting of reductions of one-parameter families over the rationals, where it is conjectured by Steven J. Miller that the bias is always negative, we prove that in our setting the bias is positive for a positive density of arithmetic progressions and negative for a positive density of arithmetic progressions. Along the way, we obtain explicit formulas for moments of traces of Frobenius of elliptic curves over finite fields in arithmetic progressions and related moments of Hurwitz class numbers in arithmetic progressions, the distribution of which are of independent interest.

Following the idea of Xing et al., we investigate a general method for constructing families of pseudorandom sequences with low correlation and large linear complexity from elliptic curves over finite fields in this correspondence. With the help of the tool of exponential sums on elliptic curves, we study their periods, linear complexities, linear complexity profiles, distributions of r-patterns, periodic correlation, partial period distributions, and aperiodic correlation in detail. The results show that they have nice randomness.

Abstruct- Elliptic cuwe cryptosystems have the potential to provide relatively small block size, high-security public key schemes that can be efficiently implemented. As with other known public key schemes, such as RSA and discrete exponentiation in a finite field, some care must be exercised when selecting the parameters involved, in this case the elliptic curve and the underlying field. Specific classes of cuwes that give little or no advantage over previously known schemes are discussed. The main result of the paper is to demonstrate the reduction of the elliptic curve logarithm problem to the logarithm problem in the multiplicative group of an extension of the underlying finite field. For the class of supersingular elliptic curves, the reduction takes probabilistic polynomial time, thus providing a probabilistic subexponential time algorithm for the former problem. Index Tem- Discrete logarithms, elliptic curves, public key CryPtOSraPhY.

Concretely efficient interactive oracle proofs (IOPs) are of interest due to their applications to scaling blockchains, their minimal security assumptions, and their potential future-proof resistance to quantum attacks.Scalable IOPs, in which prover time scales quasilinearly with the computation size and verifier time scales poly-logarithmically with it, have been known to exist thus far only over a set of finite fields of negligible density, namely, over “FFT-friendly” fields that contain a sub-group of size \(2^\mathsf{{k}} \).Our main result is to show that scalable IOPs can be constructed over any sufficiently large finite field, of size that is at least quadratic in the length of computation whose integrity is proved by the IOP. This result has practical applications as well, because it reduces the proving and verification complexity of cryptographic statements that are naturally stated over pre-defined finite fields which are not “FFT-friendly”. Prior state-of-the-art scalable IOPs relied heavily on arithmetization via univariate polynomials and Reed–Solomon codes over FFT-friendly fields. To prove our main result and extend scalability to all large finite fields, we generalize the prior techniques and use new algebraic geometry codes evaluated on sub-groups of elliptic curves (elliptic curve codes). We also show a new arithmetization scheme that uses the rich and well-understood group structure of elliptic curves to reduce statements of computational integrity to other statements about the proximity of functions evaluated on the elliptic curve to the new family of elliptic curve codes.

We prove formulas for power moments for point counts of elliptic curves over a finite field $k$ such that the groups of $k$-points of the curves contain a chosen subgroup. These formulas express the moments in terms of traces of Hecke operators for certain congruence subgroups of $\operatorname{SL}_2(\mathbb{Z})$. As our main technical input we prove an Eichler-Selberg trace formula for a family of congruence subgroups of $\operatorname{SL}_2(\mathbb{Z})$ which include as special cases the groups $\Gamma_1(N)$ and $\Gamma(N)$. Our formulas generalize results of Birch and Ihara (the case of the trivial subgroup, and the full modular group), and previous work of the authors (the subgroups $\mathbb{Z}/2\mathbb{Z}$ and $(\mathbb{Z}/2\mathbb{Z})^2$ and congruence subgroups $\Gamma_0(2),\Gamma_0(4)$). We use these formulas to answer statistical questions about point counts for elliptic curves over a fixed finite field, generalizing results of Vl\v{a}du\c{t}, Gekeler, Howe, and others.

Let F3d be a finite field of order 3d with d∈ N*. In this paper, we study the elliptic curve over the finite ring F3d[ε] :=F3d[X] / (X4 -X3), where ε4 = ε3 of characteristic 3 given by the homogeneous Weierstrass equation of the form Y2Z = X3 + aX2Z + bZ3, where a, b ∈F3d[ε], such that we study the arithmetic operations of this ring and define the elliptic curve over it. Next, we show that EΠ0(a), Π0(b)(F3d) and EΠ1(a), Π1(b)(F3d) are two elliptic curves over the finite field F3d, such that Π0 is a canonical projection and Π1 is a sum projection of coordinate of element in F3d[ε] and we conclude by given a classification of elements in elliptic curve over the finite ring F3d[ε].

We show that finding an efficiently computable injective homomorphism from the XTR subgroup into the group of points over GF(p2) of a particular type of supersingular elliptic curve is at least as hard as solving the Diffie–Hellman problem in the XTR subgroup. This provides strong evidence for a negative answer to the question posed by Vanstone and Menezes at the Crypto 2000 Rump Session on the possibility of efficiently inverting the MOV embedding into the XTR subgroup. As a side result we show that the Decision Diffie–Hellman problem in the group of points on this type of supersingular elliptic curves is efficiently computable, which provides an example of a group where the Decision Diffie–Hellman problem is simple, while the Diffie–Hellman and discrete logarithm problems are presumably not. So-called distortion maps on groups of points on elliptic curves that play an important role in our cryptanalysis also lead to cryptographic applications of independent interest. These applications are an improvement of Joux’s one round protocol for tripartite Diffie–Hellman key exchange and a non-refutable digital signature scheme that supports escrowable encryption. We also discuss the applicability of our methods to general elliptic curves defined over finite fields which includes a classification of elliptic curve groups where distortion maps exist.