A note on the signed sliding window integer recoding and a left-to-right analogue

  • Authors:
  • Roberto Maria Avanzi

  • Affiliations:
  • Institute for Experimental Mathematics (IEM), Universität Duisburg–Essen, Essen, Germany

  • Venue:
  • SAC'04 Proceedings of the 11th international conference on Selected Areas in Cryptography
  • Year:
  • 2004

Quantified Score

Hi-index 0.00

Visualization

Abstract

Addition-subtraction-chains obtained from signed digit recodings of integers are a common tool for computing multiples of random elements of a group where the computation of inverses is a fast operation. Cohen and Solinas independently described one such recoding, the ω-NAF. For scalars of the size commonly used in cryptographic applications, it leads to the current scalar multiplication algorithm of choice. However, we could find no formal proof of its optimality in the literature. This recoding is computed right-to-left. We solve two open questions regarding the ω-NAF. We first prove that the ω-NAF is a redundant radix-2 recoding of smallest weight among all those with integral coefficients smaller in absolute value than 2ω−1. Secondly, we introduce a left-to-right recoding with the same digit set as the ω-NAF, generalizing previous results. We also prove that the two recodings have the same (optimal) weight. Finally, we sketch how to prove similar results for other recodings.