Faster Implementation of ηTPairing over GF(3m) Using Minimum Number of Logical Instructions for GF(3)-Addition

  • Authors:
  • Yuto Kawahara;Kazumaro Aoki;Tsuyoshi Takagi

  • Affiliations:
  • Future University-Hakodate, Japan;NTT Information Sharing Platform Laboratories, NTT Corporation, Japan;Future University-Hakodate, Japan

  • Venue:
  • Pairing '08 Proceedings of the 2nd international conference on Pairing-Based Cryptography
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

The ηTpairing in characteristic threeis implemented by arithmetic in GF(3)={0,1,2}. Harrison et al.reported an efficient implementation of the GF(3)-addition by usingseven logical instructions (consisting of AND, OR, and XOR) withthe two-bit encoding { (0,0) →0, (0,1) →1, (1,0) → 2}. It has not yet been proven whether seven is the minimum numberof logical instructions for the GF(3)-addition. In this paper, weshow many implementations of the GF(3)-addition using only sixlogical instructions with different encodings such as { (1,1)→0, (0,1) →1, (1,0) →2 } or { (0,0) →0, (0,1)→1, (1,1) →2 }. We then prove that there is noimplementation of the GF(3)-addition using five logicalinstructions with any encoding of GF(3) by two bits. Moreover, weapply the new GF(3)-additions to an efficient softwareimplementation of the ηTpairing.The running time of the ηTpairing over GF(3509), that is considered to be realizedas 128-bit security, using the new GF(3)-addition with the encoding{ (0,0) →0, (0,1) →1, (1,1) →2 } is 16.3milliseconds on an AMD Opteron 2.2-GHz processor. This isapproximately 7% faster than the implementation using the previousGF(3)-addition with seven logical instructions.