2,165 research outputs found

    Combined small subgroups and side-channel attack on elliptic curves with cofactor divisible by 2m2^m

    Get PDF
    Nowadays, alternative models of elliptic curves like Montgomery, Edwards, twisted Edwards, Hessian, twisted Hessian, Huff's curves and many others are very popular and many people use them in cryptosystems which are based on elliptic curve cryptography. Most of these models allow to use fast and complete arithmetic which is especially convenient in fast implementations that are side-channel attacks resistant. Montgomery, Edwards and twisted Edwards curves have always order of group of rational points divisible by 4. Huff's curves have always order of rational points divisible by 8. Moreover, sometimes to get fast and efficient implementations one can choose elliptic curve with even bigger cofactor, for example 16. Of course the bigger cofactor is, the smaller is the security of cryptosystem which uses such elliptic curve. In this article will be checked what influence on the security has form of cofactor of elliptic curve and will be showed that in some situations elliptic curves with cofactor divisible by 2m2^m are vulnerable for combined small subgroups and side-channel attacks

    Thimble regularization at work for Gauge Theories: from toy models onwards

    Full text link
    A final goal for thimble regularization of lattice field theories is the application to lattice QCD and the study of its phase diagram. Gauge theories pose a number of conceptual and algorithmic problems, some of which can be addressed even in the framework of toy models. We report on our progresses in this field, starting in particular from first successes in the study of one link models.Comment: 7 pages, 2 figures. Talk given at the Lattice2015 Conferenc

    Addition law structure of elliptic curves

    Get PDF
    The study of alternative models for elliptic curves has found recent interest from cryptographic applications, once it was recognized that such models provide more efficiently computable algorithms for the group law than the standard Weierstrass model. Examples of such models arise via symmetries induced by a rational torsion structure. We analyze the module structure of the space of sections of the addition morphisms, determine explicit dimension formulas for the spaces of sections and their eigenspaces under the action of torsion groups, and apply this to specific models of elliptic curves with parametrized torsion subgroups

    The geometry of efficient arithmetic on elliptic curves

    Full text link
    The arithmetic of elliptic curves, namely polynomial addition and scalar multiplication, can be described in terms of global sections of line bundles on E×EE\times E and EE, respectively, with respect to a given projective embedding of EE in Pr\mathbb{P}^r. By means of a study of the finite dimensional vector spaces of global sections, we reduce the problem of constructing and finding efficiently computable polynomial maps defining the addition morphism or isogenies to linear algebra. We demonstrate the effectiveness of the method by improving the best known complexity for doubling and tripling, by considering families of elliptic curves admiting a 22-torsion or 33-torsion point

    Perturbative sigma models, elliptic cohomology and the Witten genus

    Full text link
    We provide a differential cocycle model for elliptic cohomology with complex coefficients and use analytic methods to construct a cocycle representative for the Witten class in this language. Our motivation stems from the conjectural connection between 2-dimensional field theories and elliptic cohomology originally due to G. Segal and E. Witten. The specifics of our constructions are informed by the work of S. Stolz and P. Teichner on super Euclidean field theories and K. Costello's construction of the Witten genus using perturbative quantization. As a warm-up, we prove analogous results for supersymmetric quantum mechanics and K-theory with complex coefficients.Comment: Changes made from referees suggestions: statements of main theorems were sharpened, physical motivations were separated from the main mathematical discussion, and the relation to Witten's original construction was clarifie
    corecore