Book contents
- Frontmatter
- Dedication
- Contents
- Preface
- Abbreviations and Standard Notation
- Chapter I Introduction
- Chapter II Finite Field Arithmetic
- Chapter III Arithmetic on an Elliptic Curve
- Chapter IV Efficient Implementation of Elliptic Curves
- Chapter V The Elliptic Curve Discrete Logarithm Problem
- Chapter VI Determining the Group Order
- Chapter VII Schoof's Algorithm and Extensions
- Chapter VIII Generating Curves using Complex Multiplication
- Chapter IX Other Applications of Elliptic Curves
- Chapter X Hyperelliptic Cryptosystems
- Appendix A Curve Examples
- Bibliography
- Author Index
- Subject Index
Chapter VI - Determining the Group Order
Published online by Cambridge University Press: 05 August 2013
- Frontmatter
- Dedication
- Contents
- Preface
- Abbreviations and Standard Notation
- Chapter I Introduction
- Chapter II Finite Field Arithmetic
- Chapter III Arithmetic on an Elliptic Curve
- Chapter IV Efficient Implementation of Elliptic Curves
- Chapter V The Elliptic Curve Discrete Logarithm Problem
- Chapter VI Determining the Group Order
- Chapter VII Schoof's Algorithm and Extensions
- Chapter VIII Generating Curves using Complex Multiplication
- Chapter IX Other Applications of Elliptic Curves
- Chapter X Hyperelliptic Cryptosystems
- Appendix A Curve Examples
- Bibliography
- Author Index
- Subject Index
Summary
The problem of determining the order of the group of rational points on an elliptic curve over a finite field – the point counting problem – is of critical importance in applications such as primality proving and cryptography. As seen in the summary section of Chapter V, for cryptographic applications, we require the curve to be non-supersingular, and the group order to be divisible by a large prime factor, which in practice may be several hundred bits long (160 bits is sometimes considered a minimal requirement). Therefore, the problem is difficult, and it requires innovative solutions that are both mathematically challenging and computationally effective.
The point counting problem is introduced in this chapter, where general methods for finite groups, as well as some Easier’ cases of elliptic curve groups, are discussed. More advanced methods applicable to broader classes of curves are discussed in Chapters VII and VIII.
Main Approaches
Three main techniques are presently used to determine elliptic curves suitable for cryptography:
• Generate random curves and compute their group orders, until an appropriate one is found.
• Generate curves with given group order using the theory of complex multiplication (CM). […]
- Type
- Chapter
- Information
- Elliptic Curves in Cryptography , pp. 101 - 108Publisher: Cambridge University PressPrint publication year: 1999