• • 上一篇    下一篇

有限域上椭圆曲线 Jacobian 群求阶算法综述与比较

王冬勤%游林%段勖超   

  • 基金资助:
    国家自然科学基金面上项目(KYZ083712053)

Summarizing and Comparison of the Algorithms for the Order of Jacobian Group of Elliptic Curves over Finite Fields

WANG Dong-qin%YOU Lin%DUAN Xu-chao   

  • About author:杭州电子科技大学信息安全与密码学研究所,浙江杭州,310018%西华大学交通与汽车工程学院,四川成都,610039

摘要: 关于椭圆曲线密码体制(ECC)的研究,如今无论是 ECC 理论还是 ECC 的标准化、产业化都趋于成熟。在 ECC 的设计中,安全椭圆曲线的选取是 ECC 实现的基石,也是其安全性的重要保证。目前,随机选取法是最好的安全椭圆曲线选取方法,其核心思想是对随机生成的椭圆曲线计算其 Jacobian 群的阶。文章主要介绍了几类经典的计算椭圆曲线 Jacobian群阶的算法:Schoof 算法、SEA 算法、Satoh 算法、AGM 算法。在详细介绍 Schoof 算法的基础上,提出了其基于离散对数问题的改进算法:袋鼠算法和大步小步(BSGS)算法的改进方法,并用实验结果说明加速后的算法得到了提升。针对 SEA 算法,文章也提出了其 BSGS 改进算法并通过实例分析比较了原 SEA 算法与 BSGS 改进算法的实现效率。针对 Satoh 算法、AGM算法,文章介绍了算法的理论依据和具体实现,并通过实例分析比较了其优劣性和适用情况。

Abstract: For the research of elliptic curve cryptography (ECC). both the theory of ECC and the standardization and industrialization of ECC are mature. In the design of ECC, the selection of a secure elliptic curve is the foundation of ECC implementation, and is also important to ensure its safety. At present, the method of random selection is considered as one of the best methods for finding a security elliptic curve. The core idea of finding security elliptic curve is to compute the order of Jacobian group of the random elliptic curve over finite fields. This paper mainly introduces several kinds of classic algorithms to compute the order of Jacobian group of the elliptic curves: Schoof algorithm, SEA algorithm, Satoh algorithm, and AGM algorithm. For the Schoof algorithm, the improved algorithms based on discrete logarithm problem are put forward: the improved algorithms of Kangaroo algorithm and Big step gain step (BSGS) algorithm, and the experimental results illustrate the accelerated algorithms improve the running time. For SEA algorithm, this paper also presents its BSGS improved algorithm, analyzing and comparing the efficiency of original SEA algorithm and BSGS improved algorithm through an example. For Satoh algorithm and AGM algorithm, the paper introduce the theoretical basis and the concrete implementation of the algorithms, comparing their advantages and applicable conditions.