Constructing elliptic curves with prescribed embedding degrees

  • Authors:
  • Paulo S. L. M. Barreto;Ben Lynn;Michael Scott

  • Affiliations:
  • Laboratório de Arquitetura e Redes de Computadores, Escola Politécnica, Universidade de São Paulo, Brazil;Computer Science Department, Stanford University;School of Computer Applications, Dublin City University, Ballymun, Dublin 9, Ireland

  • Venue:
  • SCN'02 Proceedings of the 3rd international conference on Security in communication networks
  • Year:
  • 2002

Quantified Score

Hi-index 0.00

Visualization

Abstract

Pairing-based cryptosystems depend on the existence of groups where the Decision Diffie-Hellman problem is easy to solve, but the Computational Diffie-Hellman problem is hard. Such is the case of elliptic curve groups whose embedding degree is large enough to maintain a good security level, but small enough for arithmetic operations to be feasible. However, the embedding degree for most elliptic curves is enormous, and the few previously known suitable elliptic curves have embedding degree k ≤ 6. In this paper, we examine criteria for curves with larger k that generalize prior work by Miyaji et al. based on the properties of cyclotomic polynomials, and propose efficient representations for the underlying algebraic structures.