@inproceedings{f5f03253b7b64b5b91947de4f6783c7d,
title = "Curve41417 : Karatsuba revisited",
abstract = "This paper introduces constant-time ARM Cortex-A8 ECDH software that (1) is faster than the fastest ECDH option in the latest version of OpenSSL but (2) achieves a security level above 2\textasciicircum{}200 using a prime above 2\textasciicircum{}400. For comparison, this OpenSSL ECDH option is not constant-time and has a security level of only 2\textasciicircum{}80. The new speeds are achieved in a quite different way from typical prime-field ECC software: they rely on a synergy between Karatsuba{\textquoteright}s method and choices of radix smaller than the CPU word size. Keywords: performance; Karatsuba; refined Karatsuba; reduced refined Karatsuba; radix choices; vectorization; Edwards curves; Curve41417",
author = "D.J. Bernstein and C. Chuengsatiansup and T. Lange",
year = "2014",
doi = "10.1007/978-3-662-44709-3\_18",
language = "English",
isbn = "978-3-662-44708-6",
series = "Lecture Notes in Computer Science",
publisher = "Springer",
pages = "316--334",
editor = "L. Batina and M. Robshaw",
booktitle = "Cryptographic Hardware and Embedded Systems - CHES 2014 (16th International Workshop, Busan, South Korea, September 23-26, 2014. Proceedings)",
address = "Germany",
note = "conference; 16th Workshop on Cryptographic Hardware and Embedded System; 2014-09-23; 2014-09-26 ; Conference date: 23-09-2014 Through 26-09-2014",
}