|
Improving the parallelized Pollard lambda search on anomalous binary curves
Author(s):
Robert
Gallant;
Robert
Lambert;
Scott
Vanstone.
Journal:
Math. Comp.
69
(2000),
1699-1705.
MSC (1991):
Primary 94A60, 14Q05, 14H52
Posted:
May 19, 1999
Retrieve article in:
PDF
This article is available free of charge
Abstract |
References |
Similar articles |
Additional information
Abstract:
The best algorithm known for finding logarithms on an elliptic curve is the (parallelized) Pollard lambda collision search. We show how to apply a Pollard lambda search on a set of equivalence classes derived from , which requires fewer iterations than the standard approach. In the case of anomalous binary curves over , the new approach speeds up the standard algorithm by a factor of .
References:
- [1]
- The Certicom ECC Challenge, available from http://www.certicom.com/chal/,1997.
- [2]
- D. Knuth, The Art of Computer Programming. Vol. 2: Seminumerical Algorithms, 2nd ed., Addison-Wesley, 1981. MR 83i:68003
- [3]
- N. Koblitz, ``CM-curves with good cryptographic properties'', Advances in Cryptology-CRYPTO '91, Lecture Notes in Computer Science, 576 (1992), Springer-Verlag, 279-287. MR 94e:11134
- [4]
- P. van Oorschot and M. Wiener, ``Parallel collision search with cryptanalytic applications", to appear in Journal of Cryptology.
- [5]
- J. Pollard, ``Monte Carlo methods for index computation mod
", Mathematics of Computation, 32 (1978), 918-924. MR 58:10684 - [6]
- J. Solinas, ``An improved algorithm for arithmetic on a family of elliptic curves", Advances in Cryptology-CRYPTO '97, Lecture Notes in Computer Science, 1294 (1997), Springer-Verlag, 357-371.
- [7]
- E. Teske, ``Speeding up Pollard's rho method for computing discrete logarithms", preprint, 1997, available from http://www.informatik.th-darmstadt.de/TI/Veroeffentlichung/TR/.
- [8]
- M. Wiener and R. Zuccherato, ``Faster attacks on elliptic curve cryptosystems", preprint, 1998, available from http://grouper.ieee.org/groups/1363/contributions/attackEC.ps.
Similar Articles:
Retrieve articles in Mathematics of Computation
with MSC
(1991):
94A60, 14Q05, 14H52
Retrieve articles in all Journals with MSC
(1991):
94A60, 14Q05, 14H52
Additional Information:
Robert
Gallant
Affiliation:
Certicom Corp., 200 Matheson Blvd. W., Suite 103, Mississauga, Ontario, Canada L5R 3L7
Email:
rgallant@certicom.com
Robert
Lambert
Affiliation:
Certicom Corp., 200 Matheson Blvd. W., Suite 103, Mississauga, Ontario, Canada L5R 3L7
Email:
rlambert@certicom.com
Scott
Vanstone
Affiliation:
Certicom Corp., 200 Matheson Blvd. W., Suite 103, Mississauga, Ontario, Canada L5R 3L7
Email:
svanstone@certicom.com
DOI:
10.1090/S0025-5718-99-01119-9
PII:
S 0025-5718(99)01119-9
Received by editor(s):
June 9, 1998
Received by editor(s) in revised form:
October 15, 1998
Posted:
May 19, 1999
Copyright of article:
Copyright
2000,
American Mathematical Society
|