Abstract
We further analyze the solutions to the Diophantine equations from which prime-order elliptic curves of embedding degrees k = 3,4 or 6 (MNT curves) may be obtained. We give an explicit algorithm to generate such curves. We derive a heuristic lower bound for the number E(z) of MNT curves with k = 6 and discriminant D ≤ z, and compare this lower bound with experimental data.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
References
Atkin, A.O.L., Morain, F.: Elliptic curves and primality proving. Math. Comp. 61(203), 29–68 (1993)
Barreto, P.S.L.M., Galbraith, S., O’hEigeartaigh, C., Scott, M.: Efficient pairing computation on supersingular abelian varieties. Designs, Codes and Cryptography 42, 239–271 (2007)
Computational Algebra Group: The Magma computational algebra system for algebra, number theory and geometry. School of Mathematics and Statistics, University of Sydney, http://magma.maths.usyd.edu.au/magma
Franklin, M., Boneh, D.: Identity based encryption from the Weil pairing. In: Franklin, M. (ed.) CRYPTO 2004. LNCS, vol. 3152, pp. 41–55. Springer, Heidelberg (2004)
Freeman, D., Scott, M., Teske, E.: A taxonomy of pairing-friendly elliptic curves. Cryptology ePrint Archive Report 2006/372 (2006), http://eprint.iacr.org/2006/372/
Granville, A.: ABC allows us to count squarefrees. International Mathematical Research Notices 19, 991–1009 (1998)
Hess, F., Smart, N., Vercauteren, F.: The Eta pairing revisited. IEEE Transactions on Information Theory 52, 4595–4602 (2006)
Joux, A.: A one round protocol for tripartite Diffie-Hellman. In: Bosma, W. (ed.) ANTS 2000. LNCS, vol. 1838, pp. 383–394. Springer, Heidelberg (2000)
Karabina, K.: On prime-order elliptic curves with embedding degrees 3,4 and 6. Master’s thesis, University of Waterloo (2006), http://uwspace.uwaterloo.ca/handle/10012/2671
Lenstra Jr., H.W.: Solving the Pell equation. Notices Amer. Math. Soc. 49, 182–192 (2002)
Luca, F., Shparlinski, I.E.: Elliptic curves with low embedding degree. Journal of Cryptology 19, 553–562 (2006)
Marcus, D.A.: Number fields. Springer, New York (1977)
Menezes, A., Okamoto, T., Vanstone, S.: Reducing elliptic curve logarithms to logarithms in a finite field. IEEE Transactions on Information Theory 39, 1639–1646 (1993)
Miyaji, A., Nakabayashi, M., Takano, S.: New explicit conditions of elliptic curve traces for FR-reduction. IEICE Trans. Fundamentals E84-A, 1234–1243 (2001)
Mollin, R.A.: Fundamental number theory with applications. CRC Press, Boca Raton (1998)
Mollin, R.A.: Simple continued fraction solutions for Diophantine equations. Expositiones Mathematicae 19, 55–73 (2001)
Page, D., Smart, N.P., Vercauteren, F.: A comparison of MNT curves and supersingular curves. Applicable Algebra in Engineering, Communication and Computing 17, 379–392 (2006)
Ricci, G.: Ricerche aritmetiche sui polinomi. Rend. Circ. Mat. Palermo. 57, 433–475 (1933)
Robertson, J.P.: Solving the generalized Pell equation x 2 − dy 2 = n (2004), http://hometown.aol.com/jpr2718/
Scott, M., Barreto, P.S.L.M.: Generating more MNT elliptic curves. Designs, Codes and Cryptography 38, 209–217 (2006)
Shacham, H., Boneh, D., Lynn, B.: Short signatures from the Weil pairing. In: Boyd, C. (ed.) ASIACRYPT 2001. LNCS, vol. 2248, pp. 514–532. Springer, Heidelberg (2001)
Author information
Authors and Affiliations
Editor information
Rights and permissions
Copyright information
© 2008 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Karabina, K., Teske, E. (2008). On Prime-Order Elliptic Curves with Embedding Degrees k = 3, 4, and 6. In: van der Poorten, A.J., Stein, A. (eds) Algorithmic Number Theory. ANTS 2008. Lecture Notes in Computer Science, vol 5011. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-540-79456-1_6
Download citation
DOI: https://doi.org/10.1007/978-3-540-79456-1_6
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-79455-4
Online ISBN: 978-3-540-79456-1
eBook Packages: Computer ScienceComputer Science (R0)