International Association for Cryptologic Research

International Association
for Cryptologic Research


Paper: Arithmetic of Supersingular Koblitz Curves in Characteristic Three

Roberto Maria Avanzi
Clemens Heuberger
Helmut Prodinger
Search ePrint
Search Google
Abstract: We consider digital expansions of scalars for supersingular Koblitz curves in characteristic three. These are positional representations of integers to the base of $\tau$, where $\tau$ is a zero of the characteristic polynomial $T^2 \pm 3\,T + 3$ of a Frobenius endomorphism. They are then applied to the improvement of scalar multiplication on the Koblitz curves. A simple connection between $\tau$-adic expansions and balanced ternary representations is given. Windowed non-adjacent representations are considered whereby the digits are elements of minimal norm. We give an explicit description of the elements of the digit set, allowing for a very simple and efficient precomputation strategy, whereby the rotational symmetry of the digit set is also used to reduce the memory requirements. With respect to the current state of the art for computing scalar multiplications on supersingular Koblitz curves we achieve the following improvements: \rm{(i)} speed-ups of up to 40\%, \rm{(ii)} a reduction of memory consumption by a factor of three, \rm{(iii)} our methods apply to all window sizes without requiring operation sequences for the precomputation stage to be determined offline first. Additionally, we explicitly describe the action of some endomorphisms on the Koblitz curve as a scalar multiplication by an explicitly given integer.
  title={Arithmetic of Supersingular Koblitz Curves in Characteristic Three},
  booktitle={IACR Eprint archive},
  keywords={implementation / elliptic curve cryptosystem; implementation; supersingular Koblitz curves; scalar multiplication},
  note={ 14832 received 11 Aug 2010},
  author={Roberto Maria Avanzi and Clemens Heuberger and Helmut Prodinger},