Weil pairing, Miller algorithm, menezes-okamoto-vanstone(MOV) algorithm, discrete logarithm ,"/> 有限域上椭圆曲线<span> Weil </span>对的计算

吉林大学学报(信息科学版) ›› 2022, Vol. 40 ›› Issue (3): 509-514.

• • 上一篇    下一篇

有限域上椭圆曲线 Weil 对的计算

胡建军, 王 伟, 李恒杰   

  1. 兰州文理学院 数字媒体学院, 兰州 730010
  • 收稿日期:2021-11-17 出版日期:2022-07-14 发布日期:2022-07-15
  • 作者简介:胡建军(1971— ), 男, 甘肃天水人, 兰州文理学院教授, 主要从事协议工程和网络安全研究, ( Tel) 86-13919069386 (E-mail)hujj518@ 126. com。
  • 基金资助:
    兰州文理学院服务地方经济社会发展计划基金资助项目(2021FWDF15)

Computation of Weil Pairs for Elliptic Curves over Finite Fields

HU Jianjun, WANG Wei, LI Hengjie   

  1. School of Digital Media, Lanzhou University of Arts and Science, Lanzhou 730010, China
  • Received:2021-11-17 Online:2022-07-14 Published:2022-07-15

摘要: 在公约密码学中, 有限域椭圆曲线 Weil 对的计算问题研究多集中于理论研究, 而对实践应用关注甚少, 导致部分理论研究需要新的方法支持。 为此, 给出了 Weil 对的计算方法, 通过实例指出了 Miller 算法在有限域上点的选择问题, 分析了两种不同方法使用 Miller 算法的差异。 通过 Miller 算法, 指出了MOV( Menezes- Okamoto-Vanstone)攻击离散对数的局限性。 实践分析表明, 有限域上椭圆曲线 Weil 对的计算是小子阶上的计算, 对于大子阶的计算不是很有效。

关键词: Weil 对, Miller 算法, MOV 算法, 离散对数 

Abstract: The computation of Weil pairing of elliptic curves over finite fields is of great significance to the application of public-key cryptography. The research of Weil pairing focuses on theoretical research, but pays little attention to practical application, which leads to the need for new methods to support some theoretical research. For this reason, the Weil pairing calculation method is given, the point selection problem of Miller algorithm over finite field is pointed out by examples, and the difference between two different methods using Miller algorithm is analyzed. Through Miller algorithm, the limitation of MOV( Menezes-Okamoto-Vanstone) attack discrete logarithm is pointed out. The practical analysis shows that the Weil pairing of elliptic curves in finite fields are of small order and not very effective for large suborder.

Key words: Weil pairing')">

Weil pairing, Miller algorithm, menezes-okamoto-vanstone(MOV) algorithm, discrete logarithm

中图分类号: 

  • TP309. 7