Decaf: Eliminating cofactors through point compression

Mike Hamburg

eprint.iacr.org will be offline for approximately an hour for routine maintenance at 11pm UTC on Tuesday, April 16. We lost some data between April 12 and April 14, and some authors have been notified that they need to resubmit their papers.

Paper 2015/673

Decaf: Eliminating cofactors through point compression

Mike Hamburg

Abstract

We propose a new unified point compression format for Edwards, Twisted Edwards and Montgomery curves over large-characteristic fields, which effectively divides the curve's cofactor by 4 at very little cost to performance. This allows cofactor-4 curves to efficiently implement prime-order groups.

Metadata

Available format(s): PDF
Category: Public-key cryptography
Publication info: A minor revision of an IACR publication in CRYPTO 2015
Keywords: Elliptic curves Edwards curves Montgomery curves isogenies quotient groups
Contact author(s): mike @ shiftleft org
History: 2015-07-05: received
Short URL: https://ia.cr/2015/673
License: CC BY

BibTeX

@misc{cryptoeprint:2015/673,
      author = {Mike Hamburg},
      title = {Decaf: Eliminating cofactors through point compression},
      howpublished = {Cryptology ePrint Archive, Paper 2015/673},
      year = {2015},
      note = {\url{https://eprint.iacr.org/2015/673}},
      url = {https://eprint.iacr.org/2015/673}
}