Description
The talk will be concerned with arithmetic on elliptic and hyperelliptic curves. We show how fast the arithmetic can get by clever choices of the coordinates and present special kinds of curves which allow even faster arithmetic using the Frobenius endomorphism. For elliptic curves this has been used to achieve fast arithmetic for the past years. However, so far arithmetic in the ideal class group of hyperelliptic curves was performed using Cantor's algorithm which needs several inversions per group operation.<br/> Starting with the work of Harley and improved by Miyamoto, Doi, Matsuo, Chao, and Tsuji and by Takahashi efficient explicit formulae are at hand. Meanwhile inversion-free systems have been studied allowing even hardware implementations and depending on the system, hyperelliptic curves can even be faster than elliptic curves. Curve-endomorphisms allow to obtain further speed-up. We shortly present Koblitz curves, the generalized GLV method and trace zero subvarieties.
Next sessions
-
Séminaire C2 à INRIA Paris
Emmanuel Thomé et Pierrick Gaudry Rachelle Heim Boissier Épiphane Nouetowa Dung Bui Plus d'infos sur https://seminaire-c2.inria.fr/ -
Attacking the Supersingular Isogeny Problem: From the Delfs–Galbraith algorithm to oriented graphs
Speaker : Arthur Herlédan Le Merdy - COSIC, KU Leuven
The threat of quantum computers motivates the introduction of new hard problems for cryptography.One promising candidate is the Isogeny problem: given two elliptic curves, compute a “nice’’ map between them, called an isogeny.In this talk, we study classical attacks on this problem, specialised to supersingular elliptic curves, on which the security of current isogeny-based cryptography relies. In[…]-
Cryptography
-