Another Approach to Pairing Computation in Edwards Coordinates

  • Authors:
  • Sorina Ionica;Antoine Joux

  • Affiliations:
  • Université de Versailles Saint-Quentin-en-Yvelines, Versailles CEDEX, France 78035;DGA, and Université de Versailles Saint-Quentin-en-Yvelines, Versailles CEDEX, France 78035

  • Venue:
  • INDOCRYPT '08 Proceedings of the 9th International Conference on Cryptology in India: Progress in Cryptology
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

The recent introduction of Edwards curves has significantly reduced the cost of addition on elliptic curves. This paper presents new explicit formulae for pairing implementation in Edwards coordinates. We prove our method gives performances similar to those of Miller's algorithm in Jacobian coordinates and is thus of cryptographic interest when one chooses Edwards curve implementations of protocols in elliptic curve cryptography. The method is faster than the recent proposal of Das and Sarkar for computing pairings on supersingular curves using Edwards coordinates.