Optimal eta pairing on supersingular genus-2 binary hyperelliptic curves

  • Authors:
  • Diego F. Aranha;Jean-Luc Beuchat;Jérémie Detrey;Nicolas Estibals

  • Affiliations:
  • Institute of Computing, University of Campinas, Campinas, Brazil;Graduate School of Systems and Information Engineering, University of Tsukuba, Tsukuba, Ibaraki, Japan;CARAMEL project-team, LORIA, INRIA / CNRS / Nancy Université, Vandoeuvre-lès-Nancy Cedex, France;CARAMEL project-team, LORIA, INRIA / CNRS / Nancy Université, Vandoeuvre-lès-Nancy Cedex, France

  • Venue:
  • CT-RSA'12 Proceedings of the 12th conference on Topics in Cryptology
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

This article presents a novel pairing algorithm over supersingular genus-2 binary hyperelliptic curves. Starting from Vercauteren's work on optimal pairings, we describe how to exploit the action of the 23m-th power Verschiebung in order to reduce the loop length of Miller's algorithm even further than the genus-2 ηT approach. As a proof of concept, we detail an optimized software implementation and an FPGA accelerator for computing the proposed optimal Eta pairing on a genus-2 hyperelliptic curve over $\mathbb{F}_{2^{367}}$ , which satisfies the recommended security level of 128 bits. These designs achieve favourable performance in comparison with the best known implementations of 128-bit-security Type-1 pairings from the literature.