Nonsingular plane cubic curves over finite fields
Journal of Combinatorial Theory Series A
Counting points on curves over finite fields
Journal of Symbolic Computation
Algebraic aspects of cryptography
Algebraic aspects of cryptography
Counting Points on Hyperelliptic Curves over Finite Fields
ANTS-IV Proceedings of the 4th International Symposium on Algorithmic Number Theory
Hi-index | 0.00 |
We consider curves defined over small finite fields with points of large prime order over an extension field. Such curves are often referred to as Koblitz curves and are of considerable cryptographic interest. An interesting question is whether such curves are easy to construct as the target point order grows asymptotically. We show that under certain number theoretic conjecture, if q is a prime power, r is a prime and √q(r log q)2+ε, then there are at least Ω(q/r1+ε log2 q) non-isomorphic elliptic curves E/Fq, such that the quotient group E(Fqr)/E(Fq) has prime order. We also show that under the same conjecture, if q is a prime power and r is a prime satisfying q (r log q)2+ε and √q = o(q/r1+ε log q) then there are at least Ω(q/r1+ε log q) curves H/Fq of genus 2, such that the order of the quotient group Jac(H)(Fqr)/Jac(H)(Fq) is a prime. Based on these results we present simple and efficient algorithms for generating Ω(log3 n) non-isomorphic elliptic curves in Ω(log n) isogenous classes, each with a point of prime order Θ(n). The average time to generate one curve is O(log2 n). We also present an algorithm which generates Ω(log3 n) curves of genus two with Jacobians whose orders have a prime factor of order Θ(n), in heuristic expected time O(log4 n) per curve.