Visible to the public Improvement of Miller Loop for a Pairing on FK12 Curve and its Implementation

TitleImprovement of Miller Loop for a Pairing on FK12 Curve and its Implementation
Publication TypeConference Paper
Year of Publication2022
AuthorsIkesaka, Kazuma, Nanjo, Yuki, Kodera, Yuta, Kusaka, Takuya, Nogami, Yasuyuki
Conference Name2022 Tenth International Symposium on Computing and Networking (CANDAR)
Date Publishednov
KeywordsComputational efficiency, cryptography, exponentiation, Hamming weight, human factors, Miller loop, Pairing based cryptography, pubcrawl, resilience, Resiliency, Scalability, STNFS
AbstractPairing is carried out by two steps, Miller loop and final exponentiation. In this manuscript, the authors propose an efficient Miller loop for a pairing on the FK12 curve. A Hamming weight and bit-length of loop parameter have a great effect on the computational cost of Miller loop. Optimal-ate pairing is used as the most efficient pairing on the FK12 curve currently. The loop parameter of optimal-ate pairing is 6z+2 where z is the integer to make the FK12 curve parameter. Our method uses z which has a shorter bit-length than the previous optimal-ate pairing as the loop parameter. Usually, z has a low Hamming weight to make final exponentiation efficient. Therefore, the loop parameter in our method has a lower Hamming weight than the loop parameter of the previous one in many cases. The authors evaluate our method by the number of multiplications and execution time. As a result, the proposed algorithm leads to the 3.71% reduction in the number of multiplications and the 3.38% reduction in the execution time.
DOI10.1109/CANDAR57322.2022.00021
Citation Keyikesaka_improvement_2022-1