Abstract:In pairing-based cryptography, most researches are focused on elliptic curves of embedding degrees greater than six, but less on curves of small embedding degrees, although they are important for pairing-based cryptography over composite-order groups. This paper analyzes efficient pairings on ordinary elliptic curves of embedding degree 1 and 2 from the point of shortening Miller's loop. We first show that pairing lattices presented by Hess can be redefined on composite-order groups. Then we give a simpler variant of the Weil pairing lattice which can also be regarded as an Omega pairing lattice, and extend it to ordinary curves of embedding degree 1. In our analysis, the optimal Omega pairing, as the super-optimal pairing on elliptic curves of embedding degree 1 and 2, could be more efficient than Weil and Tate pairings. On the other hand, elliptic curves of embedding degree 2 are also very useful for pairings on elliptic curves over RSA rings proposed by Galbraith and McKee. So we analyze the construction of such curves over RSA rings, and redefine pairing lattices over RSA rings. Specially, modified Omega pairing lattices over RSA rings can be computed without knowing the RSA trapdoor. Furthermore, for keeping the trapdoor secret, we develop an original idea of evaluating pairings without leaking the group order.

Families of Prime-Order Endomorphism-Equipped Embedded Curves on Pairing-Friendly Curves

On Constructing Prime Order Elliptic Curves Suitable for Pairing-Based Cryptography

Six Subfamilies of Implementation-Friendly Barreto-Naehrig Curves

THE DEFORMATION OF PAIRS (X, E) LIFTING FROM BASE FAMILY

MNT Elliptic Curves with Non-Prime Order

Families of Pairs of Genus 2 Curves with Isomorphic Unpolarized Jacobians

Efficient pairing computation on ordinary elliptic curves of embedding degree 1 and 2

Sesquilinear pairings on elliptic curves

Computing nonsurjective primes associated to Galois representations of genus $2$ curves

Supersingular Curves With Small Non-integer Endomorphisms

$K_2$ of families of elliptic curves over non-Abelian cubic and quartic fields

A Classical Family Of Elliptic Curves Having Rank One And The 2-Primary Part Of Their Tate-Shafarevich Group Non-Trivial

Families of curves over any finite field with a class number greater than the Lachaud - Martin-Deschamps bounds

On the Final Exponentiation for Calculating Pairings on Ordinary Elliptic Curves

On the prime Selmer ranks of cyclic prime twist families of elliptic curves over global function fields

On efficient pairings on elliptic curves over extension fields

Familles de polynomes liees aux courbes modulaires X_1(l) unicursales et points rationnels non-triviaux de courbes elliptiques quotient

On elliptic curves assigned to a pair of right triangles with an equal hypotenuse

On $12$-congruences of elliptic curves

Large Family of Sequences from Elliptic Curves over Residue Class Rings

Complete Families of Generic Covers of Elliptic Curves