## CryptoDB

### Cheol-Min Park

#### Publications

Year
Venue
Title
2017
ASIACRYPT
2008
EPRINT
In this paper, we propose a new method for constructing a bilinear pairing over (hyper)elliptic curves, which we call the R-ate pairing. This pairing is a generalization of the Ate and Ate_i pairing, and also improves efficiency of the pairing computation. Using the R-ate pairing, the loop length in Miller's algorithm can be as small as ${\rm log}(r^{1 / \phi(k)})$ for some pairing-friendly elliptic curves which have not reached this lower bound. Therefore we obtain from 29 % to 69 % savings in overall costs compared to the Ate_i pairing. On supersingular hyperelliptic curves of genus 2, we show that this approach makes the loop length in Miller's algorithm shorter than that of the Ate pairing.

#### Coauthors

Namhun Koo (1)
Hyang-Sook Lee (1)
Eunjeong Lee (1)
Kyung-Ah Shim (1)