Abstract:In pairing-based cryptography, most researches are focused on elliptic curves of embedding degrees greater than six, but less on curves of small embedding degrees, although they are important for pairing-based cryptography over composite-order groups. This paper analyzes efficient pairings on ordinary elliptic curves of embedding degree 1 and 2 from the point of shortening Miller's loop. We first show that pairing lattices presented by Hess can be redefined on composite-order groups. Then we give a simpler variant of the Weil pairing lattice which can also be regarded as an Omega pairing lattice, and extend it to ordinary curves of embedding degree 1. In our analysis, the optimal Omega pairing, as the super-optimal pairing on elliptic curves of embedding degree 1 and 2, could be more efficient than Weil and Tate pairings. On the other hand, elliptic curves of embedding degree 2 are also very useful for pairings on elliptic curves over RSA rings proposed by Galbraith and McKee. So we analyze the construction of such curves over RSA rings, and redefine pairing lattices over RSA rings. Specially, modified Omega pairing lattices over RSA rings can be computed without knowing the RSA trapdoor. Furthermore, for keeping the trapdoor secret, we develop an original idea of evaluating pairings without leaking the group order.

Pairing Computation on Elliptic Curves of Jacobi Quartic Form.

Fast tate pairing computation on twisted Jacobi intersections curves

Efficient Pairing Computation on Elliptic Curves in Hessian Form

Efficient Implementation of Tate Pairing with Montgomery Ladder Method

On the Final Exponentiation for Calculating Pairings on Ordinary Elliptic Curves

Efficient pairing computation on ordinary elliptic curves of embedding degree 1 and 2

Pairings on Generalized Huff Curves

On efficient pairings on elliptic curves over extension fields

Efficient Pairing Computation on Twisted Weierstrass Curves

Differential Addition on Jacobi Quartic Curves

Omega Pairing on Hyperelliptic Curves

Refinement of miller's algorithm over edwards curves

The Elliptic Net Algorithm Revisited

Pairing Optimizations for Isogeny‐Based Cryptosystems

Sesquilinear pairings on elliptic curves

Implementing cryptographic pairings at standard security levels

Explicit formulas for efficient multiplication in F_{3^{6m}}

An Improved Twisted Ate Pairing over KSS Curves with k = 18.

An improved twisted Ate pairing over KSS curves with κ = 18

Improvements of the Ate-Pairing Used for IBC

Computing the Cassels-Tate Pairing for Genus Two Jacobians with Rational Two Torsion Points