Efficient Optimal Ate Pairing at 128-bit Security Level
Al-Amin Khandaker, Md ; Nanjo, Yuki ; Ghammam, Loubna ; Duquesne, Sylvain ; Nogami, Yasuyuki ; Kodera, Yuta
HAL, hal-01620848 / Harvested from HAL
Following the emergence of Kim and Barbulescu's new number field sieve (exTNFS) algorithm at CRYPTO'16 [21] for solving discrete logarithm problem (DLP) over the finite field; pairing-based cryptography researchers are intrigued to find new parameters that confirm standard security levels against exTNFS. Recently, Barbulescu and Duquesne have suggested new parameters [3] for well-studied pairing-friendly curves i.e., Barreto-Naehrig (BN) [5], Barreto-Lynn-Scott (BLS-12) [4] and Kachisa-Schaefer-Scott (KSS-16) [19] curves at 128-bit security level (twist and subgroup attack secure). They have also concluded that in the context of Optimal-Ate pairing with their suggested parameters , BLS-12 and KSS-16 curves are more efficient choices than BN curves. Therefore, this paper selects the atypical and less studied pairing-friendly curve in literature, i.e., KSS-16 which offers quartic twist, while BN and BLS-12 curves have sextic twist. In this paper, the authors optimize Miller's algorithm of Optimal-Ate pairing for the KSS-16 curve by deriving efficient sparse multiplication and implement them. Furthermore , this paper concentrates on the Miller's algorithm to experimentally verify Barbulescu et al.'s estimation. The result shows that Miller's algorithm time with the derived pseudo 8-sparse multiplication is most efficient for KSS-16 than other two curves. Therefore, this paper defends Barbulescu and Duquesne's conclusion for 128-bit security.
Publié le : 2017-12-04
Classification:  sparse multiplication,  Optimal-Ate pairing,  KSS-16 curve,  [MATH.MATH-NT]Mathematics [math]/Number Theory [math.NT],  [MATH.MATH-IT]Mathematics [math]/Information Theory [math.IT],  [INFO.INFO-CR]Computer Science [cs]/Cryptography and Security [cs.CR]
@article{hal-01620848,
     author = {Al-Amin Khandaker, Md and Nanjo, Yuki and Ghammam, Loubna and Duquesne, Sylvain and Nogami, Yasuyuki and Kodera, Yuta},
     title = {Efficient Optimal Ate Pairing at 128-bit Security Level},
     journal = {HAL},
     volume = {2017},
     number = {0},
     year = {2017},
     language = {en},
     url = {http://dml.mathdoc.fr/item/hal-01620848}
}
Al-Amin Khandaker, Md; Nanjo, Yuki; Ghammam, Loubna; Duquesne, Sylvain; Nogami, Yasuyuki; Kodera, Yuta. Efficient Optimal Ate Pairing at 128-bit Security Level. HAL, Tome 2017 (2017) no. 0, . http://gdmltest.u-ga.fr/item/hal-01620848/