The focal point of this paper is to present the theoretical aspects of the building blocks of the upper bounds of ISD （integer sub-decomposition） method defined by kP = k11P ＋ k12ψ1 （P） ＋ k21P ＋ k22ψ2 （P） w...The focal point of this paper is to present the theoretical aspects of the building blocks of the upper bounds of ISD （integer sub-decomposition） method defined by kP = k11P ＋ k12ψ1 （P） ＋ k21P ＋ k22ψ2 （P） with max {｜k11｜, ｜k12｜} 〈 Ca√n and max{｜k21｜, ｜k22｜}≤C√, where C=I that uses efficiently computable endomorphisms ψj for j=1,2 to compute any multiple kP of a point P of order n lying on an elliptic curve E. The upper bounds of sub-scalars in ISD method are presented and utilized to enhance the rate of successful computation of scalar multiplication kP. Important theorems that establish the upper bounds of the kernel vectors of the ISD reduction map are generalized and proved in this work. The values of C in the upper bounds, that are greater than 1, have been proven in two cases of characteristic polynomials （with degree 1 or 2） of the endomorphisms. The upper bound of ISD method with the case of the endomorphism rings over an integer ring Z results in a higher rate of successful computations kP. Compared to the case of endomorphism rings, which is embedded over an imaginary quadratic field Q = [4-D]. The determination of the upper bounds is considered as a key point in developing the ISD elliptic scalar multiplication technique.展开更多
文摘The focal point of this paper is to present the theoretical aspects of the building blocks of the upper bounds of ISD （integer sub-decomposition） method defined by kP = k11P ＋ k12ψ1 （P） ＋ k21P ＋ k22ψ2 （P） with max {｜k11｜, ｜k12｜} 〈 Ca√n and max{｜k21｜, ｜k22｜}≤C√, where C=I that uses efficiently computable endomorphisms ψj for j=1,2 to compute any multiple kP of a point P of order n lying on an elliptic curve E. The upper bounds of sub-scalars in ISD method are presented and utilized to enhance the rate of successful computation of scalar multiplication kP. Important theorems that establish the upper bounds of the kernel vectors of the ISD reduction map are generalized and proved in this work. The values of C in the upper bounds, that are greater than 1, have been proven in two cases of characteristic polynomials （with degree 1 or 2） of the endomorphisms. The upper bound of ISD method with the case of the endomorphism rings over an integer ring Z results in a higher rate of successful computations kP. Compared to the case of endomorphism rings, which is embedded over an imaginary quadratic field Q = [4-D]. The determination of the upper bounds is considered as a key point in developing the ISD elliptic scalar multiplication technique.
