### Current browse context:

math.AG

### Change to browse by:

### References & Citations

# Mathematics > Algebraic Geometry

# Title: Optimal Ate Pairing on Elliptic Curves with Embedding Degree $9,15$ and $27$

(Submitted on 27 Feb 2020 (this version),

*latest version 16 Apr 2020*(v2))Abstract: Much attention has been given to efficient computation of pairings on elliptic curves with even embedding degree since the advent of pairing-based cryptography. The existing few works in the case of odd embedding degrees require some improvements. This paper considers the computation of optimal ate pairings on elliptic curves of embedding degrees $k=9, 15 \mbox{ and } 27$ which have twists of order three. Mainly, we provide a detailed arithmetic and cost estimation of operations in the tower extensions field of the corresponding extension fields. A good selection of parameters enables us to improve the theoretical cost for the Miller step and the final exponentiation using the lattice-based method comparatively to the previous few works that exist in these cases. In particular for $k=15$ and $k=27$ we obtained an improvement, in terms of operations in the base field, of up to $25\%$ and $29\%$ respectively in the computation of the final exponentiation. Also, we obtained that elliptic curves with embedding degree $k=15$ present faster results than BN$12$ curves at the $128$-bit security levels. We provided a MAGMA implementation in each case to ensure the correctness of the formulas used in this work.

## Submission history

From: Emmanuel Fouotsa [view email] [via PASCAL proxy]**[v1]**Thu, 27 Feb 2020 05:19:00 GMT (32kb)

**[v2]**Thu, 16 Apr 2020 09:18:14 GMT (35kb,D)

Link back to: arXiv, form interface, contact.