{"title":"Fast point quadrupling on elliptic curves","authors":"Duc-Phong Le, B. Nguyen","doi":"10.1145/2350716.2350750","DOIUrl":null,"url":null,"abstract":"Ciet et al. (2006) proposed an elegant method for trading inversions for multiplications when computing [2]P+Q from two given points P and Q on elliptic curves of Weierstrass form. Motivated by their work, this paper proposes a fast algorithm for computing [4]P with only one inversion in affine coordinates. Our algorithm that requires 1I + 8S + 8M, is faster than two repeated doublings whenever the cost of one field inversion is more expensive than the cost of four field multiplications plus four field squarings (i.e. I > 4M + 4S). It saves one field multiplication and one field squaring in comparison with the Sakai-Sakurai method (2001). Even better, for special curves that allow \"a = 0\" (or \"b = 0\") speedup, we obtain [4]P in affine coordinates using just 1I + 5S + 9M (or 1I + 5S + 6M, respectively).","PeriodicalId":208300,"journal":{"name":"Proceedings of the 3rd Symposium on Information and Communication Technology","volume":"12 1","pages":"0"},"PeriodicalIF":0.0000,"publicationDate":"2012-08-23","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"6","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Proceedings of the 3rd Symposium on Information and Communication Technology","FirstCategoryId":"1085","ListUrlMain":"https://doi.org/10.1145/2350716.2350750","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 6
Abstract
Ciet et al. (2006) proposed an elegant method for trading inversions for multiplications when computing [2]P+Q from two given points P and Q on elliptic curves of Weierstrass form. Motivated by their work, this paper proposes a fast algorithm for computing [4]P with only one inversion in affine coordinates. Our algorithm that requires 1I + 8S + 8M, is faster than two repeated doublings whenever the cost of one field inversion is more expensive than the cost of four field multiplications plus four field squarings (i.e. I > 4M + 4S). It saves one field multiplication and one field squaring in comparison with the Sakai-Sakurai method (2001). Even better, for special curves that allow "a = 0" (or "b = 0") speedup, we obtain [4]P in affine coordinates using just 1I + 5S + 9M (or 1I + 5S + 6M, respectively).