Efficient Arithmetic on Koblitz Curves

  • Authors:
  • Jerome A. Solinas

  • Affiliations:
  • National Security Agency, Ft. Meade, MD 20755, USA, and Visitor, Centre for Applied Cryptographic Research, Univ. of Waterloo

  • Venue:
  • Designs, Codes and Cryptography - Special issue on towards a quarter-century of public key cryptography
  • Year:
  • 2000

Quantified Score

Hi-index 0.02

Visualization

Abstract

It has become increasingly common to implementdiscrete-logarithm based public-key protocols on elliptic curvesover finite fields. The basic operation is scalar multiplication:taking a given integer multiple of a given point on the curve.The cost of the protocols depends on that of the elliptic scalarmultiplication operation.Koblitz introduceda family of curves which admit especially fast elliptic scalarmultiplication. His algorithm was later modified by Meier andStaffelbach. We give an improved version of the algorithm whichruns 50 than any previous version. It is based on a new kindof representation of an integer, analogous to certain kinds ofbinary expansions. We also outline further speedups using precomputationand storage.