Can we Beat the Square Root Bound for ECDLP over 𝔽p2 via Representation?

We give a 4-list algorithm for solving the Elliptic Curve Discrete Logarithm (ECDLP) over some quadratic field 𝔽p2. Using the representation technique, we reduce ECDLP to a multivariate polynomial zero testing problem. Our solution of this problem using bivariate polynomial multi-evaluation yields a...

Full description

Bibliographic Details
Main Authors: Delaplace Claire, May Alexander
Format: Article
Language:English
Published: De Gruyter 2020-08-01
Series:Journal of Mathematical Cryptology
Subjects:
Online Access:https://doi.org/10.1515/jmc-2019-0025
id doaj-531f0a379b2642f8b6e328a9af927de1
record_format Article
spelling doaj-531f0a379b2642f8b6e328a9af927de12021-09-06T19:40:45ZengDe GruyterJournal of Mathematical Cryptology1862-29761862-29842020-08-0114129330610.1515/jmc-2019-0025jmc-2019-0025Can we Beat the Square Root Bound for ECDLP over 𝔽p2 via Representation?Delaplace Claire0May Alexander1Horst Görtz Institute for IT Security, Ruhr University Bochum, Bochum, GermanyHorst Görtz Institute for IT Security, Ruhr University Bochum, Bochum, GermanyWe give a 4-list algorithm for solving the Elliptic Curve Discrete Logarithm (ECDLP) over some quadratic field 𝔽p2. Using the representation technique, we reduce ECDLP to a multivariate polynomial zero testing problem. Our solution of this problem using bivariate polynomial multi-evaluation yields a p1.314-algorithm for ECDLP. While this is inferior to Pollard’s Rho algorithm with square root (in the field size) complexity 𝓞(p), it still has the potential to open a path to an o(p)-algorithm for ECDLP, since all involved lists are of size as small as p34,$\begin{array}{} p^{\frac 3 4}, \end{array}$ only their computation is yet too costly.https://doi.org/10.1515/jmc-2019-0025ecdlprepresentationsmultivariate polynomial zero-testing11y9911t0611t71
collection DOAJ
language English
format Article
sources DOAJ
author Delaplace Claire
May Alexander
spellingShingle Delaplace Claire
May Alexander
Can we Beat the Square Root Bound for ECDLP over 𝔽p2 via Representation?
Journal of Mathematical Cryptology
ecdlp
representations
multivariate polynomial zero-testing
11y99
11t06
11t71
author_facet Delaplace Claire
May Alexander
author_sort Delaplace Claire
title Can we Beat the Square Root Bound for ECDLP over 𝔽p2 via Representation?
title_short Can we Beat the Square Root Bound for ECDLP over 𝔽p2 via Representation?
title_full Can we Beat the Square Root Bound for ECDLP over 𝔽p2 via Representation?
title_fullStr Can we Beat the Square Root Bound for ECDLP over 𝔽p2 via Representation?
title_full_unstemmed Can we Beat the Square Root Bound for ECDLP over 𝔽p2 via Representation?
title_sort can we beat the square root bound for ecdlp over 𝔽p2 via representation?
publisher De Gruyter
series Journal of Mathematical Cryptology
issn 1862-2976
1862-2984
publishDate 2020-08-01
description We give a 4-list algorithm for solving the Elliptic Curve Discrete Logarithm (ECDLP) over some quadratic field 𝔽p2. Using the representation technique, we reduce ECDLP to a multivariate polynomial zero testing problem. Our solution of this problem using bivariate polynomial multi-evaluation yields a p1.314-algorithm for ECDLP. While this is inferior to Pollard’s Rho algorithm with square root (in the field size) complexity 𝓞(p), it still has the potential to open a path to an o(p)-algorithm for ECDLP, since all involved lists are of size as small as p34,$\begin{array}{} p^{\frac 3 4}, \end{array}$ only their computation is yet too costly.
topic ecdlp
representations
multivariate polynomial zero-testing
11y99
11t06
11t71
url https://doi.org/10.1515/jmc-2019-0025
work_keys_str_mv AT delaplaceclaire canwebeatthesquarerootboundforecdlpoverfp2viarepresentation
AT mayalexander canwebeatthesquarerootboundforecdlpoverfp2viarepresentation
_version_ 1717767896319393792