We are not able to resolve this OAI Identifier to the repository landing page. If you are the repository manager for this record, please head to the Dashboard and adjust the settings.
International Association for Cryptologic Research (IACR)
Abstract
The GLV method of Gallant, Lambert and Vanstone~(CRYPTO 2001) computes any multiple kP of a point P of prime order n lying on an elliptic curve with a low-degree endomorphism Ξ¦ (called GLV curve) over Fpβ as kP=k1βP+k2βΞ¦(P), with max{β£k1ββ£,β£k2ββ£}β€C1βnβ for some explicit constant C1β>0. Recently, Galbraith, Lin and Scott (EUROCRYPT 2009) extended this method to all curves over Fp2β which are twists of curves defined over Fpβ.
We show in this work how to merge the two approaches in order to get, for twists of any GLV curve over Fp2β, a four-dimensional decomposition together with fast endomorphisms Ξ¦,Ξ¨ over Fp2β acting on the group generated by a point P of prime order n, resulting in a proven decomposition for any scalar kβ[1,n] given by kP=k1βP+k2βΞ¦(P)+k3βΞ¨(P)+k4βΨΦ(P), with maxiβ(β£kiββ£)0. Remarkably, taking the best C1β,C2β, we obtain C2β/C1β<412, independently of the curve, ensuring in theory an almost constant relative speedup. In practice, our experiments reveal that the use of the merged GLV-GLS approach supports a scalar multiplication that runs up to 50\% faster than the original GLV method. We then improve this performance even further by exploiting the Twisted Edwards model and show that curves originally slower may become extremely efficient on this model. In addition, we analyze the performance of the method on a multicore setting and describe how to efficiently protect GLV-based scalar multiplication against several side-channel attacks. Our implementations improve the state-of-the-art performance of point multiplication for a variety of scenarios including side-channel protected and unprotected cases with sequential and multicore execution
Is data on this page outdated, violates copyrights or anything else? Report the problem now and we will take corresponding actions after reviewing your request.