Embedded Curves and Embedded Families for SNARK-Friendly Curves - CentraleSupélec
Pré-Publication, Document De Travail Année : 2024

Embedded Curves and Embedded Families for SNARK-Friendly Curves

Simon Masson
  • Fonction : Auteur
  • PersonId : 1431765

Résumé

Based on the CM method for primality testing (ECPP) by Atkin and Morain published in 1993, we present two algorithms: one to generate embedded elliptic curves of SNARK-friendly curves, with a variable discriminant D; and another to generate families (parameterized by polynomials) with a fixed discriminant D. When D = 3 mod 4, it is possible to obtain a prime-order curve, and form a cycle. We apply our technique first to generate more embedded curves like Bandersnatch with BLS12-381 and we propose a plain twist-secure cycle above BLS12-381 with D = 6673027. We also devise about the scarcity of Bandersnatch-like CM curves, and show that with our algorithm, it is only a question of core-hours to find them. Second, we obtain families of prime-order embedded curves of discriminant D = 3 for BLS and KSS18 curves. Our method obtains families of embedded curves above KSS16 and can work for any KSS family. Our work generalizes the work on Bandersnatch (Masson, Sanso, and Zhang, and Sanso and El Housni).
Fichier principal
Vignette du fichier
paper.pdf (539.82 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-04750802 , version 1 (23-10-2024)

Licence

Identifiants

  • HAL Id : hal-04750802 , version 1

Citer

Aurore Guillevic, Simon Masson. Embedded Curves and Embedded Families for SNARK-Friendly Curves. 2024. ⟨hal-04750802⟩
0 Consultations
0 Téléchargements

Partager

More