Universal ηT pairing algorithm over arbitrary extension degree (ワイドバンドシステム)
スポンサーリンク
概要
- 論文の詳細を見る
The η_T pairing on supersingular is one of the most efficient algorithms for computing the bilinear pairing [2]. The η_T pairing defined over finite field F_<3n> has embedding degree 6, so that it is particularly efficient for higher security with large extension degree n. Note that the extension degree n cannot be freely selected due to several attacks, for examples, we can securely use only n=97, 163, 167, 193,239,313,353,.... It is better that we can select many n's to implement the η_T pairing, since n corresponds to security level of the η_T pairing. However, the explicit algorithm over F_<3n> in [2] is designed just for n≡1 (mod 12). It is relative complicated to construct an explicit algorithm for n≢1 (mod 12). because it causes several variations based on extension degree n and the curve parameters. In this paper we present an explicit algorithm for computing η_T pairing with arbitrary extension degree n. However, the algorithm should contain many branch conditions depending on n and the curve parameters, that is undesirable for implementers of the η_T pairing. This paper then proposes the universal η_T pairing (η_T^^〜 pairing), which satisfies the bilinearity of pairing (compatible with Tate pairing) without any branches in the program, and is as efficient as the original one. Therefore the proposed universal η_T pairing is suitable for the implementation of various extension degrees n with higher security.
- 社団法人電子情報通信学会の論文
- 2007-03-08
著者
-
Okamoto Eiji
Graduate School Of Systems And Information Engineering University Of Tsukuba
-
Takagi Tsuyoshi
Future Univ.‐hakodate Hakodate‐shi Jpn
-
Takagi Tsuyoshi
School Of Systems Information Science Future University-hakodate
-
Okamoto Eiji
Univ. Tsukuba Tsukuba‐shi Jpn
-
SHIRASE Masaaki
School of Systems Information Science, Future University-Hakodate
-
Shirase Masaaki
Future University-hakodate
-
Okamoto Eiji
Graduate School Of Systems And Information Engineering Univ. Of Tsukuba
-
Shirase Masaaki
School Of Systems Information Science Future University-hakodate
関連論文
- Sender Authenticated Key Agreements without Random Oracles
- An ID-SP-M4M Scheme and Its Security Analysis(Signatures,Cryptography and Information Security)
- Authorization-Limited Transformation-Free Proxy Cryptosystems and Their Security Analyses(Protocol, Cryptography and Information Security)
- A Share-Correctable Protocol for the Shamir Threshod Scheme and Its Application to Participant Enrollment (特集 多様な社会的責任を担うコンピュータセキュリティ技術)
- How to Verify the Threshold t of Shamir's (t,n)-Threshold Scheme (特集 多様な社会的責任を担うコンピュータセキュリティ技術)
- A Share-Correctable Protocol for the Shamir Threshold Scheme and Its Application to Participant Enrollment
- How to Verify the Threshold t of Shamirs (t, n)-Threshold Scheme
- Sender Authenticated Key Agreements without Random Oracles
- Reduction Optimal Trinomials for Efficient Software Implementation of the ηT Pairing
- Efficient Implementation of the Pairing on Mobilephones Using BREW
- Generalized Powering Functions and Their Application to Digital Signatures(Digital Signature, Cryptography and Information Security)
- Radix-r Non-Adjacent Form and Its Application to Pairing-Based Cryptosystem(Elliptic Curve Cryptography, Cryptography and Information Security)
- Distributed Noise Generation for Density Estimation Based Clustering without Trusted Third Party
- Security and Correctness Analysis on Privacy-Preserving k-Means Clustering Schemes
- Defeating Simple Power Analysis on Koblitz Curves(Discrete Mathematics and Its Applications)
- Security Analysis of the SPA-Resistant Fractional Width Method(Elliptic Curve Cryptography, Cryptography and Information Security)
- A New Upper Bound for the Minimal Density of Joint Representations in Elliptic Curve Cryptosystems(Discrete Mathematics and Its Applications)
- Faster MapToPoint on Supersingular Elliptic Curves in Characteristic 3
- A More Compact Representation of XTR Cryptosystem
- Efficient Hyperelliptic Curve Cryptosystems Using Theta Divisors(Elliptic Curve Cryptography, Cryptography and Information Security)
- Some Efficient Algorithms for the Final Exponentiation of ηT Pairing
- Universal ηT pairing algorithm over arbitrary extension degree (ワイドバンドシステム)
- Universal ηT pairing algorithm over arbitrary extension degree (情報セキュリティ)
- Universal ηT pairing algorithm over arbitrary extension degree (情報理論)
- Anonymous On-Demand Position-based Routing in Mobile Ad-hoc Networks (特集:ユビキタス社会を支えるコンピュータセキュリティ技術)
- Efficient Implementation of Pairing-Based Cryptography on a Sensor Node
- Solving a 676-Bit Discrete Logarithm Problem in GF(3^)
- Identity-Based Proxy Cryptosystems with Revocability and Hierarchical Confidentialities
- Anonymous On-Demand Position-based Routing in Mobile Ad-hoc Networks
- A Share-Correctable Protocol for the Shamir Threshold Scheme and Its Application to Participant Enrollment
- Anonymous On-Demand Position-based Routing in Mobile Ad-hoc Networks