International Association
for Cryptologic Research

We present an efficient implementation of the Optimal Ate Pairing on Barreto-Naehrig

curve over a 254-bit prime field on Intel Haswell processor.

Our library is able to compute the optimal ate pairing over a 254-bit prime field,

in just 1.17 million of clock cycles on a single core of an Intel Core i7-4700MQ(2.4GHz)

processor with TurboBoost technology disabled.