Fast Hashing to G2 on Pairing-Friendly Curves

  • Authors:
  • Michael Scott;Naomi Benger;Manuel Charlemagne;Luis J. Dominguez Perez;Ezekiel J. Kachisa

  • Affiliations:
  • School of Computing, Dublin City University, Ballymun, Dublin 9, Ireland;School of Computing, Dublin City University, Ballymun, Dublin 9, Ireland;School of Computing, Dublin City University, Ballymun, Dublin 9, Ireland;School of Computing, Dublin City University, Ballymun, Dublin 9, Ireland;School of Computing, Dublin City University, Ballymun, Dublin 9, Ireland

  • Venue:
  • Pairing '09 Proceedings of the 3rd International Conference Palo Alto on Pairing-Based Cryptography
  • Year:
  • 2009

Quantified Score

Hi-index 0.00

Visualization

Abstract

Pairings on elliptic curves usually take as input a point in a subgroup G 1 of an elliptic curve group $E({\mathbb{F}}_p)$ and a point in a subgroup G 2 of $E'({\mathbb{F}}_{p^d})$ for some twist E *** of E . In this paper we consider the problem of hashing to G 2 when the group G 2 has prime order. The naive approach requires multiplication in the group $E'({\mathbb{F}}_{p^d})$ by a large cofactor. Our main result is to describe a fast method to compute this cofactor multiplication; our method exploits an efficiently computable homomorphism.