Extractors are an important ingredient in designing key exchange protocols and secure pseudorandom sequences in the standard model. Elliptic and hyperelliptic curves are gaining more and more interest due to their fast arithmetic and the fact that no subexponential attacks against the discrete logarithm problem are known.
In this paper we propose two simple and efficient deterministic extractors for , the Jacobian of a genus 2 hyperelliptic curve H defined over , where q¿=¿2 n , called the sum and product extractors.
For non-supersingular hyperelliptic curves having a Jacobian with group order 2m, where m is odd, we propose the modified sum and product extractors for the main subgroup of . We show that, if is chosen uniformly at random, the bits extracted from D are indistinguishable from a uniformly random bit-string of length n.
|Title of host publication||Information Security and Privacy (13th Australasian Conference, ACISP 2008, Wollongong, Australia, July 7-9, 2008, Proceedings)|
|Editors||Y. Mu, W. Susilo, J. Seberry|
|Place of Publication||Berlin|
|Publication status||Published - 2008|
|Name||Lecture Notes in Computer Science|