International Association for Cryptologic Research

International Association
for Cryptologic Research

CryptoDB

Point Compression for Koblitz Elliptic Curves

Authors:
P.N.J. Eagle
Steven D. Galbraith
Download:
URL: http://eprint.iacr.org/2009/086
Search ePrint
Search Google
Abstract: Elliptic curves over finite fields have applications in public key cryptography. A Koblitz curve is an elliptic curve $E$ over $\F_2$; the group $E( \Ftn )$ has convenient features for efficient implementation of elliptic curve cryptography. Wiener and Zuccherato and Gallant, Lambert and Vanstone showed that one can accelerate the Pollard rho algorithm for the discrete logarithm problem on Koblitz curves. This implies that when using Koblitz curves, one has a lower security per bit than when using general elliptic curves defined over the same field. Hence for a fixed security level, systems using Koblitz curves require slightly more bandwidth. We present a method to reduce this bandwidth. Our method is appropriate for applications such as Diffie-Hellman key exchange or Elgamal encryption. We show that, with a low probability of failure, our method gives the expected bandwidth for a given security level.
BibTeX
@misc{eprint-2009-18205,
  title={Point Compression for Koblitz Elliptic Curves},
  booktitle={IACR Eprint archive},
  keywords={implementation /},
  url={http://eprint.iacr.org/2009/086},
  note={ Steven.Galbraith@rhul.ac.uk 14293 received 18 Feb 2009},
  author={P.N.J. Eagle and Steven D. Galbraith},
  year=2009
}