Fast bilinear maps from the Tate-Lichtenbaum pairing on hyperelliptic curves

G. Frey, T. Lange

Research output: Chapter in Book/Report/Conference proceedingConference contributionAcademicpeer-review

12 Citations (Scopus)


Pairings on elliptic curves recently obtained a lot of attention not only as a means to attack curve based cryptography but also as a building block for cryptosystems with special properties like short signatures or identity based encryption.In this paper we consider the Tate pairing on hyperelliptic curves of genus g. We give mathematically sound arguments why it is possible to use particular representatives of the involved residue classes in the second argument that allow to compute the pairing much faster, where the speed-up grows with the size of g. Since the curve arithmetic takes about the same time for small g and constant group size, this implies that g>1 offers advantages for implementations. We give two examples of how to apply the modified setting in pairing based protocols such that all parties profit from the idea.We stress that our results apply also to non-supersingular curves, e. g. those constructed by complex multiplication, and do not need distortion maps. They are also applicable if the co-factor is nontrivial.
Original languageEnglish
Title of host publicationAlgorithmic Number Theory (Proceedings 7th International Symposium, ANTS-VII, Berlin, Germany, July 23-28, 2006)
EditorsFlorian Hess, Sebastian Pauli, Michael Pohst
Place of PublicationBerlin
Number of pages14
ISBN (Electronic)978-3-540-36076-6
ISBN (Print)3-540-36075-1, 978-3-540-36075-9
Publication statusPublished - 2006

Publication series

NameLecture Notes in Computer Science (LNCS)
ISSN (Print)0302-9743


Dive into the research topics of 'Fast bilinear maps from the Tate-Lichtenbaum pairing on hyperelliptic curves'. Together they form a unique fingerprint.

Cite this