MNT Elliptic Curves with Non-Prime Order

Maciej Grześkowiak

2024-09-30

Abstract:Miyaji, Nakabayashi, and Takano proposed the algorithm for the construction of prime order pairing-friendly elliptic curves with embedding degrees $k=3,4,6$. We present a method for generating generalized MNT curves. The order of such pairing-friendly curves is the product of two prime numbers.

Cryptography and Security,Number Theory

What problem does this paper attempt to address?

On Constructing Prime Order Elliptic Curves Suitable for Pairing-Based Cryptography

Meng Zhang,Xuehong Chen,Maozhi Xu,Jie Wang

DOI: https://doi.org/10.1007/978-981-15-2777-7_5

2019-01-01

Abstract:Since Boneh and Franklin implemented the Identity Based Encryption in 2001, a number of novel schemes have been proposed based on bilinear pairings, which have been widely used in the scenario of blockchain. The elliptic curves with low embedding degree and large prime-order subgroup (a.k.a pairing-friendly elliptic curves) are the basic components for such schemes, where prime order elliptic curves are most frequently used in practice. In this paper, a systematic method is utilized to find all the possible prime order families, then it is shown that all the existing constructions can be explained via our method. We further give the evidence that it's unlikely to produce extra families.
Families of Prime-Order Endomorphism-Equipped Embedded Curves on Pairing-Friendly Curves

Antonio Sanso,Youssef El Housni

DOI: https://doi.org/10.1007/s00145-024-09514-5

2024-10-10

Journal of Cryptology

Abstract:This paper presents a procedure to construct parameterized families of prime-order endomorphism-equipped elliptic curves that are defined over the scalar field of pairing-friendly elliptic curve families such as Barreto–Lynn–Scott (BLS), Barreto–Naehrig (BN) and Kachisa–Schaefer–Scott (KSS), providing general formulas derived from the curves' seeds. These so-called "embedded curves" are of major interest in SNARK applications that prove statements involving elliptic curve arithmetic i.e. digital signatures. In this paper, the mathematical groundwork is laid, and advantages of these embeddings are discussed. Additionally, practical examples in the case of BN and BLS families are included and impossibility results regarding KSS families are explained.

computer science, theory & methods,engineering, electrical & electronic,mathematics, applied
Constructing curves of high rank via composite polynomials

Arvind Suresh

2023-10-01

Abstract:Let $k$ be a number field. We refine a construction of Mestre--Shioda to construct (infinite) families of hyperelliptic curves $X/{k}$ having a record number of rational points and record Mordell--Weil rank relative to the genus of $g$ of $X$. Over $k=\mathbb{Q}$, we obtain modest improvements on the current published records, and these improvements become more significant as $k$ gets larger. For example, we obtain curves over the real cyclotomic field $k = \mathbb{Q}(\cos(\pi/(g+1)))$ having at least $16(g+1)$ $k$-points and rank at least $8g$. The defining equations for the curves are closely related to the classical Chebyshev polynomials, and in special cases, we recover families studied (for example) by Mestre, Shioda, Brumer, and Tautz--Top--Verberkmoes.

Number Theory,Algebraic Geometry
Partitions into Triples with Equal Products and Families of Elliptic Curves

Ahmed El Amine Youmbai,Arman Shamsi Zargar,Maksym Voznyy

2024-08-25

Abstract:Let $S_l(M,N)$ denote a set of $\ell$ triples of positive integers whose parts have the same sum $M$ and the same product $N$. For each $2\leq\ell\leq 4$ we establish a connection between the set $S_l(M,N)$ and a family of elliptic curves. When $\ell=2$ and $3$, we use certain known parametrised sets $S_l(M,N)$ and respectively find families of elliptic curves of generic rank~$\geq 5$ and $\geq 6$, while for $\ell=4$ we first obtain a parametrised set $S_l(M,N)$, then construct a family of elliptic curves of generic rank $\geq 8$. Finally, we perform a computer search within these families to find specific curves with rank~$\geq 11$. The highest rank examples we found were two curves of rank~$14$.

Number Theory
Torsion points and isogenies on CM elliptic curves

Abbey Bourdon,Pete L. Clark

DOI: https://doi.org/10.1112/jlms.12329

2019-06-18

Abstract:Let $\mathcal{O}$ be an order in the imaginary quadratic field $K$. For positive integers $M \mid N$, we determine the least degree of an $\mathcal{O}$-CM point on the modular curve $X(M,N)_{/K(\zeta_M)}$ and also on the modular curve $X(M,N)_{/\mathbb{Q}(\zeta_M)}$: that is, we treat both the case in which the complex multiplication is rationally defined and the case in which we do not assume that the complex multiplication is rationally defined. To prove these results we establish several new theorems on rational cyclic isogenies of CM elliptic curves. In particular, we extend a result of Kwon that determines the set of positive integers $N$ for which there is an $\mathcal{O}$-CM elliptic curve $E$ admitting a cyclic, $\mathbb{Q}(j(E))$-rational $N$-isogeny.

Number Theory
On elliptic curves assigned to a pair of right triangles with an equal hypotenuse

Arman Shamsi Zargar Seiji Tomita 1 Department of Mathematics and Applications,University of Mohaghegh Ardabili,Ardabil,Iran.2 Tokyo Software Company (Inc.),Japan. E-Mail

DOI: https://doi.org/10.2989/16073606.2024.2412293

2024-10-16

Quaestiones Mathematicae

Abstract:Consider a pair of right triangles with an equal hypotenuse. This turns out to solve the diophantine system of equations a 2 + b 2 = c 2 + d 2 = e 2 in integers. To this system we associate a family of elliptic curves with defining equation y 2 = ( x − a 2 )( x − b 2 )( x − c 2 )+ a 2 b 2 c 2 . We show that there exists a subfamily of rank ≥ 3 over Q( m , n , k , l ) and obtain a subfamily of rank (exactly) four over Q( k ) and determine a set of its free generators. Besides, we show there exist infinitely many elliptic curves of rank ≥ 5 parameterized by a rank five quartic elliptic curve. We also find a few particular examples with higher ranks. The families we construct have Z/2Z torsion subgroups in general. The previous work [13] has obtained similar Pythagorean quadruplet elliptic curve families in two parameters with rank ≥ 3. (Recall that by a Pythagorean quadruplet ( a , b , c , d ), we mean an integer solution to the quadratic equation a 2 + b 2 = c 2 + d 2 .)

mathematics
A Classical Family Of Elliptic Curves Having Rank One And The 2-Primary Part Of Their Tate-Shafarevich Group Non-Trivial

Yukako Kezuka,Yongxiong Li

DOI: https://doi.org/10.4171/dm/795

2020-01-01

Documenta mathematica

Abstract:We study elliptic curves of the form x(3) + y(3) = 2p and x(3) + y(3) = 2p(2) where p is any odd prime satisfying p equivalent to 2 mod 9 or p equivalent to 5 mod 9. We first show that the 3-part of the Birch-Swinnerton-Dyer conjecture holds for these curves. Then we relate their 2-Selmer group to the 2-rank of the ideal class group of Q((3)root p) to obtain some examples of elliptic curves with rank one and non-trivial 2-part of the Tate-Shafarevich group.
Efficient arithmetic on elliptic curves in characteristic 2

David Kohel

DOI: https://doi.org/10.48550/arXiv.1601.03669

2016-01-15

Abstract:We present normal forms for elliptic curves over a field of characteristic $2$ analogous to Edwards normal form, and determine bases of addition laws, which provide strikingly simple expressions for the group law. We deduce efficient algorithms for point addition and scalar multiplication on these forms. The resulting algorithms apply to any elliptic curve over a field of characteristic $2$ with a $4$-torsion point, via an isomorphism with one of the normal forms. We deduce algorithms for duplication in time $2M + 5S + 2m_c$ and for addition of points in time $7M + 2S$, where $M$ is the cost of multiplication, $S$ the cost of squaring, and $m_c$ the cost of multiplication by a constant. By a study of the Kummer curves $\mathcal{K} = E/\{[\pm1]\}$, we develop an algorithm for scalar multiplication with point recovery which computes the multiple of a point $P$ with $4M + 4S + 2m_c + m_t$ per bit where $m_t$ is multiplication by a constant that depends on $P$.

Number Theory
On Bounds and Diophantine Properties of Elliptic Curves

Navvye Anand

DOI: https://doi.org/10.13140/RG.2.2.11148.12161

2024-06-30

Abstract:Mordell equations are celebrated equations within number theory and are named after Louis Mordell, an American-born British mathematician, known for his pioneering research in number theory. In this paper, we discover all Mordell equations of the form $y^2 = x^3 + k$, where $k \in \mathbb Z$, with exactly $|k|$ integral solutions. We also discover explicit bounds for Mordell equations, parameterized families of elliptic curves and twists on elliptic curves. Using the connection between Mordell curves and binary cubic forms, we improve the lower bound for the number of integral solutions of a Mordell curve by looking at a pair of curves with unusually high rank.

General Mathematics
Θ-Congruent Numbers, Tiling Numbers and the Selmer Rank of Related Elliptic Curves: Odd N

Qiuyue Liu,Jing Yang,Keqin Feng

2020-01-01

Abstract:Several discrete geometry problems are closely related to the arithmetic theory of elliptic curves defined on the rational fields ℚ. In this paper we consider the θ-congruent number for θ=π/3 and 2π/3 and tiling number n. For the case that n⩾ 2 is square-free odd integer, we determine all n such that the Selmer rank of elliptic curve E_n,π/3: y^2=x(x-n)(x+3n) or/and E_n,2π/3: y^2=x(x+n)(x-3n) is zero. From this, we provide several series of non θ-congruent numbers for θ=π/3 and 2π/3, and non tiling numbers n with arbitrary many of prime divisors.
Hyperelliptic and trigonal modular curves in characteristic $p$

Maarten Derickx,Filip Najman

2024-06-26

Abstract:Let $X_\Delta(N)$ be an intermediate modular curve of level $N$, meaning that there exist (possibly trivial) morphisms $X_1(N)\rightarrow X_\Delta(N) \rightarrow X_0(N)$. For all such intermediate modular curves, we give an explicit description of all primes $p$ such that $X_\Delta(N)_{\overline{\mathbb F}_p}$ is either hyperelliptic or trigonal. Furthermore we also determine all primes $p$ such that $X_\Delta(N)_{\mathbb F_p}$ is trigonal. This is done by first using the Castelnuovo-Severi inequality to establish a bound $N_0$ such that if $X_0(N)_{{\overline{\mathbb F}_p}}$ is hyperelliptic or trigonal, then $N \leq N_0$. To deal with the remaining small values of $N$, we develop a method based on the careful study of the canonical ideal to determine, for a fixed curve $X_\Delta(N)$, all the primes $p$ such that the $X_\Delta(N)_{ {\overline{\mathbb F}_p}}$ is trigonal or hyperelliptic. Furthermore, using similar methods, we show that $X_\Delta(N)_{{\overline{\mathbb F}_p}}$ is not a smooth plane quintic, for any $N$ and any $p$.

Number Theory
Efficient pairing computation on ordinary elliptic curves of embedding degree 1 and 2

Xusheng Zhang,Dongdai Lin

DOI: https://doi.org/10.1007/978-3-642-25516-8_19

2011-01-01

Abstract:In pairing-based cryptography, most researches are focused on elliptic curves of embedding degrees greater than six, but less on curves of small embedding degrees, although they are important for pairing-based cryptography over composite-order groups. This paper analyzes efficient pairings on ordinary elliptic curves of embedding degree 1 and 2 from the point of shortening Miller's loop. We first show that pairing lattices presented by Hess can be redefined on composite-order groups. Then we give a simpler variant of the Weil pairing lattice which can also be regarded as an Omega pairing lattice, and extend it to ordinary curves of embedding degree 1. In our analysis, the optimal Omega pairing, as the super-optimal pairing on elliptic curves of embedding degree 1 and 2, could be more efficient than Weil and Tate pairings. On the other hand, elliptic curves of embedding degree 2 are also very useful for pairings on elliptic curves over RSA rings proposed by Galbraith and McKee. So we analyze the construction of such curves over RSA rings, and redefine pairing lattices over RSA rings. Specially, modified Omega pairing lattices over RSA rings can be computed without knowing the RSA trapdoor. Furthermore, for keeping the trapdoor secret, we develop an original idea of evaluating pairings without leaking the group order.
A New Approach to Non-lightlike Curve Pairs

Zehra Ekinci,Mehmet Önder

DOI: https://doi.org/10.48550/arXiv.1704.04978

2021-12-06

Abstract:In this paper, we introduce a new approach to non-lightlike curve pairs by using integral curves in Minkowski 3-space. We consider direction curve and donor curve to study non-lightlike curve couples such as involute-evolute curves, Mannheim partner curves and Bertrand partner curves. We obtain new methods to construct partner curves of a unit speed non-lightlike curve and give some applications related to helices and slant helices.

Differential Geometry
Complex Projective 3-Fold with Non-Negative Canonical Euler-Poincare Characteristic

Meng Chen,Kang Zuo

DOI: https://doi.org/10.4310/cag.2008.v16.n1.a5

2008-01-01

Communications in Analysis and Geometry

Abstract:We work over the complex number field C. In this paper, we study multi-canonical systems |mKV | on complex projective 3-folds V of general type. On a smooth complex complete curve C of genus g(C) ≥ 2, it is well known that the 3-canonical map φ3 := Φ|3KC | is always an embedding. On a smooth minimal projective surface S of general type, Bombieri [2] proved that the m-canonical map is a birational morphism for all m ≥ 5. The work of Tsuji [31], Hacon–McKernan [13] and Takayama [28] says that there exists a universal constant r3 such that the r3-canonical map Φr3 is birational for all smooth projective 3-folds of general type. We note that Tsuji [31] announced a very large r3. Recently Chen and the first author [5] have given an explicit r3 (≤77). Under extra assumptions there have been already the following optimal results about r3 for minimal projective 3-folds X of general type with Q-factorial terminal singularities:
Generalised Kato classes on CM elliptic curves of rank 2

Francesc Castella

2023-11-28

Abstract:Let $E/\mathbf{Q}$ be a CM elliptic curve and let $p\geq 5$ be a prime of good ordinary reduction for $E$. Suppose that $L(E,s)$ vanishes at $s=1$ and has sign $+1$ in its functional equation, so in particular ${\rm ord}_{s=1}L(E,s)\geq 2$. In this paper we slightly modify a construction of Darmon--Rotger to define a generalised Kato class $\kappa_p\in{\rm Sel}(\mathbf{Q},V_pE)$, and prove the following rank two analogue of Kolyvagin's result: \[ \kappa_p\neq 0\quad\Longrightarrow\quad{\rm dim}_{\mathbf{Q}_p}{\rm Sel}(\mathbf{Q},V_pE)=2. \] Conversely, when ${\rm dim}_{\mathbf{Q}_p}{\rm Sel}(\mathbf{Q},V_pE)=2$ we show that $\kappa_p\neq 0$ \emph{if and only if} the restriction map \[ {\rm Sel}(\mathbf{Q},V_pE)\rightarrow E(\mathbf{Q}_p)\hat\otimes\mathbf{Q}_p \] is nonzero. The proof of these results, which extend and strenghten similar results of the author with Hsieh in the non-CM case, exploit a new link between the nonvanishing of generalised Kato classes and a main conjecture in anticyclotomic Iwasawa theory.

Number Theory
Primality proving using elliptic curves with complex multiplication by imaginary quadratic fields of class number three

Hiroshi Onuki

2024-04-11

Abstract:In 2015, Abatzoglou, Silverberg, Sutherland, and Wong presented a framework for primality proving algorithms for special sequences of integers using an elliptic curve with complex multiplication. They applied their framework to obtain algorithms for elliptic curves with complex multiplication by imaginary quadratic field of class numbers one and two, but, they were not able to obtain primality proving algorithms in cases of higher class number. In this paper, we present a method to apply their framework to imaginary quadratic fields of class number three. In particular, our method provides a more efficient primality proving algorithm for special sequences of integers than the existing algorithms by using an imaginary quadratic field of class number three in which 2 splits. As an application, we give two special sequences of integers derived from $\Q(\sqrt{-23})$ and $\Q(\sqrt{-31})$, which are all the imaginary quadratic fields of class number three in which 2 splits. Finally, we give a computational result for the primality of these sequences.

Mathematics
Generic curves and non-coprime Catalans

Eugene Gorsky,Mikhail Mazin,Alexei Oblomkov

2024-06-21

Abstract:We compute the Poincaré polynomials of the compactified Jacobians for plane curve singularities with Puiseaux exponents $(nd,md,md+1)$, and relate them to the combinatorics of $q,t$-Catalan numbers in the non-coprime case. We also confirm a conjecture of Cherednik and Danilenko for such curves.

Algebraic Geometry,Combinatorics
On the Final Exponentiation for Calculating Pairings on Ordinary Elliptic Curves

Michael Scott,Naomi Benger,Manuel Charlemagne,Luis J. Dominguez Perez,Ezekiel J. Kachisa

DOI: https://doi.org/10.1007/978-3-642-03298-1_6

2009-01-01

Abstract:When performing a Tate pairing (or a derivative thereof) on an ordinary pairing-friendly elliptic curve, the computation can be looked at as having two stages, the Miller loop and the so-called final exponentiation. As a result of good progress being made to reduce the Miller loop component of the algorithm (particularly with the discovery of "truncated loop" pairings like the R-ate pairing [18]), the final exponentiation has become a more significant component of the overall calculation. Here we exploit the structure of pairing-friendly elliptic curves to reduce to a minimum the computation required for the final exponentiation.
Pairing Computation on Elliptic Curves of Jacobi Quartic Form.

wang,hong,kunpeng,zhang,lijun,li,bao

IF: 1.019

2011-01-01

Chinese Journal of Electronics

Abstract:This paper proposes explicit formulae for the addition step and doubling step in Miller's algorithm to compute Tate pairing on Jacobi quartic curves. We present a geometric interpretation of the group law on Jacobi quartic curves, which leads to formulae for Miller's algorithm. The doubling step formula is competitive with that for Weierstrass curves and Edwards curves. Moreover, by carefully choosing the coefficients, there exist quartic twists of Jacobi quartic curves from which pairing computation can benefit a lot. Finally, we provide some examples of supersingular and ordinary pairing friendly Jacobi quartic curves.
Sporadic Cubic Torsion

Maarten Derickx,Anastassia Etropolski,Mark van Hoeij,Jackson S. Morrow,David Zureick-Brown

DOI: https://doi.org/10.2140/ant.2021.15.1837

2024-06-04

Abstract:Let $K$ be a number field, and let $E/K$ be an elliptic curve over $K$. The Mordell--Weil theorem asserts that the $K$-rational points $E(K)$ of $E$ form a finitely generated abelian group. In this work, we complete the classification of the finite groups which appear as the torsion subgroup of $E(K)$ for $K$ a cubic number field. To do so, we determine the cubic points on the modular curves $X_1(N)$ for \[N = 21, 22, 24, 25, 26, 28, 30, 32, 33, 35, 36, 39, 45, 65, 121.\] As part of our analysis, we determine the complete list of $N$ for which $J_0(N)$ (resp., $J_1(N)$, resp., $J_1(2,2N)$) has rank 0. We also provide evidence to a generalized version of a conjecture of Conrad, Edixhoven, and Stein by proving that the torsion on $J_1(N)(\mathbb{Q})$ is generated by $\text{Gal}(\bar{\mathbb{Q}}/\mathbb{Q})$-orbits of cusps of $X_1(N)_{\bar{\mathbb{Q}}}$ for $N\leq 55$, $N \neq 54$.

Number Theory,Algebraic Geometry

MNT Elliptic Curves with Non-Prime Order

On Constructing Prime Order Elliptic Curves Suitable for Pairing-Based Cryptography

Families of Prime-Order Endomorphism-Equipped Embedded Curves on Pairing-Friendly Curves

Constructing curves of high rank via composite polynomials

Partitions into Triples with Equal Products and Families of Elliptic Curves

Torsion points and isogenies on CM elliptic curves

On elliptic curves assigned to a pair of right triangles with an equal hypotenuse

A Classical Family Of Elliptic Curves Having Rank One And The 2-Primary Part Of Their Tate-Shafarevich Group Non-Trivial

Efficient arithmetic on elliptic curves in characteristic 2

On Bounds and Diophantine Properties of Elliptic Curves

Θ-Congruent Numbers, Tiling Numbers and the Selmer Rank of Related Elliptic Curves: Odd N

Hyperelliptic and trigonal modular curves in characteristic $p$

Efficient pairing computation on ordinary elliptic curves of embedding degree 1 and 2

A New Approach to Non-lightlike Curve Pairs

Complex Projective 3-Fold with Non-Negative Canonical Euler-Poincare Characteristic

Generalised Kato classes on CM elliptic curves of rank 2

Primality proving using elliptic curves with complex multiplication by imaginary quadratic fields of class number three

Generic curves and non-coprime Catalans

On the Final Exponentiation for Calculating Pairings on Ordinary Elliptic Curves

Pairing Computation on Elliptic Curves of Jacobi Quartic Form.

Sporadic Cubic Torsion