MNT Elliptic Curves with Non-Prime Order

Maciej Grześkowiak
2024-09-30
Abstract:Miyaji, Nakabayashi, and Takano proposed the algorithm for the construction of prime order pairing-friendly elliptic curves with embedding degrees $k=3,4,6$. We present a method for generating generalized MNT curves. The order of such pairing-friendly curves is the product of two prime numbers.
Cryptography and Security,Number Theory
What problem does this paper attempt to address?
The problem that this paper attempts to solve is to generate MNT Elliptic Curves with Non - Prime Order. Specifically, the author proposes a method to generate generalized MNT elliptic curves whose orders are the product of two prime numbers. ### Problem Background In pairing cryptography, it is usually necessary to construct pairing - friendly elliptic curves with a specific embedding degree \(k\). Miyaji, Nakabayashi and Takano proposed an algorithm for constructing pairing - friendly elliptic curves with prime order and embedding degree \(k = 3, 4, 6\). However, in practical applications, it is sometimes necessary to construct elliptic curves with non - prime order, such as \(qn\), where \(q\) is a small prime number and \(n\) is a large prime number. ### Main Contributions of the Paper 1. **Extension of the MNT Method**: The paper proposes a new method to generate generalized MNT elliptic curves with non - prime order. 2. **Introduction of New Polynomial Families**: By introducing new polynomial families, more pairing - friendly elliptic curves can be generated. 3. **Provision of Generalized Pell's Equation**: In order to effectively construct the required elliptic curves, the paper provides the corresponding generalized Pell's equation. ### Specific Methods The paper achieves its goals through the following steps: - **Fixing Parameters**: Select the embedding degree \(k\in\{3, 4, 6\}\) and a prime number \(q\equiv1\pmod{k}\). - **Constructing Polynomial Families**: According to different values of \(k\), construct polynomial families \((n_k(x), p_k(x), t_k(x))\) that satisfy the conditions of Definition 1.1. - **Solving Generalized Pell's Equation**: For each polynomial family, provide the corresponding generalized Pell's equation to ensure that the required elliptic curves can be effectively constructed. ### Mathematical Formulas The conditions in Definition 1.1 can be expressed as: \[ qn_k(x)=p_k(x) + 1 - t_k(x)\] \[ qn_k(x)\mid\Phi_k(p_k(x))\] \[ t_k(x)^2 - 4p_k(x)<0\] where \(\Phi_k(x)\) is the \(k\)-th cyclotomic polynomial, and \(n_k(x)\) and \(p_k(x)\) are irreducible polynomials. ### Conclusion Through the above methods, the paper successfully extends the MNT method, enabling more types of pairing - friendly elliptic curves to be generated, thereby improving the flexibility and security of the pairing - based cryptosystem.