English

Parallel Computation of Optimal Ate Cryptographic Pairings at the $128$, $192$ and $256$-bit security levels using elliptic net algorithm

Algebraic Geometry 2021-01-26 v2 Cryptography and Security Number Theory

Abstract

Efficient computations of pairings with Miller Algorithm have recently received a great attention due to the many applications in cryptography. In this work, we give formulae for the optimal Ate pairing in terms of elliptic nets associated to twisted Barreto-Naehrig (BN) curve, Barreto-Lynn-Scott(BLS) curves and Kachisa-Schaefer-Scott(KSS) curves considered at the 128128, 192192 and 256256-bit security levels, and Scott-Guillevic curve with embedding degree 5454. We show how to parallelize the computation of these pairings when the elliptic net algorithm instead is used and we obtain except in the case of Kachisa-Schaefer-Scott(KSS) curves considered at the 256256-bit security level, more efficient theoretical results with 88 processors compared to the case where the Miller algorithm is used. This work still confirms that BLS48BLS48 curves are the best for pairing-based cryptography at 256256-bit security level \cite{NARDIEFO19}.

Cite

@article{arxiv.2003.11286,
  title  = {Parallel Computation of Optimal Ate Cryptographic Pairings at the $128$, $192$ and $256$-bit security levels using elliptic net algorithm},
  author = {Narcisse Bang Mbang and Emmanuel Fouotsa and Celestin Lele},
  journal= {arXiv preprint arXiv:2003.11286},
  year   = {2021}
}
R2 v1 2026-06-23T14:26:33.864Z