Optimal software-implemented Itoh–Tsujii inversion for F 2 m - Inria - Institut national de recherche en sciences et technologies du numérique Access content directly
Conference Papers Year : 2016

Optimal software-implemented Itoh–Tsujii inversion for F 2 m


Field inversion in F2m dominates the cost of modern software implementations of certain elliptic curve cryptographic operations, such as point encoding/hashing into elliptic curves. [7, 6, 2] Itoh–Tsujii inversion using a polynomial basis and precomputed table-based multi-squaring has been demonstrated to be highly effective for software implementations [19, 14, 2], but the performance and memory use depend critically on the choice of addition chain and multi-squaring tables, which in prior work have been determined only by suboptimal ad-hoc methods and manual selection. We thoroughly investigated the performance/memory tradeoff for table-based linear transforms used for efficient multi-squaring. Based upon the results of that investigation, we devised a comprehensive cost model for Itoh–Tsujii inversion and a corresponding optimization procedure that is empirically fast and provably finds globally-optimal solutions. We tested this method on 8 binary fields commonly used for elliptic curve cryptography; our method found lower-cost solutions than the ad-hoc methods used previously, and for the first time enables a principled exploration of the time/memory tradeoff of inversion implementations.
Fichier principal
Vignette du fichier
wcc15-mo2-3.pdf (715.19 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-01275712 , version 1 (18-02-2016)


  • HAL Id : hal-01275712 , version 1


Jeremy Maitin-Shepard. Optimal software-implemented Itoh–Tsujii inversion for F 2 m. WCC2015 - 9th International Workshop on Coding and Cryptography 2015, Anne Canteaut, Gaëtan Leurent, Maria Naya-Plasencia, Apr 2015, Paris, France. ⟨hal-01275712⟩


41 View
91 Download


Gmail Facebook X LinkedIn More