Edwards normal form: Difference between revisions

From Elliptic Curve Crypto
category
pgo
Line 18: Line 18:


And this brings us back to the ancient Greek word <big>[https://en.wiktionary.org/wiki/%CF%83%CF%84%CF%81%CE%B1%CE%B3%CE%B3%CF%8C%CF%82#Ancient_Greek στραγγός]</big> with the idea of using something “twisted” for [[strong cryptography]].
And this brings us back to the ancient Greek word <big>[https://en.wiktionary.org/wiki/%CF%83%CF%84%CF%81%CE%B1%CE%B3%CE%B3%CF%8C%CF%82#Ancient_Greek στραγγός]</big> with the idea of using something “twisted” for [[strong cryptography]].
== Point group arithmetic ==
The [[point group operation]] on an elliptic curve in the twisted Edwards form as defined above is defined as <ref>Daniel J. Bernstein, Peter Birkner, Marc Joye, Tanja Lange, and Christiane Peters. “Twisted Edwards Curves.” ''Cryptology ePrint Archive,'' vol. 2008, no. 013 https://eprint.iacr.org/2008/013.pdf</ref>
:<math>(x_1,y_1)\oplus(x_2,y_2) =
\left(\frac{x_1y_2+y_1x_2}{1+dx_1x_2y_1y_2},
\frac{y_1y_2-ax_1x_2}{1-dx_1x_2y_1y_2}
\right)</math>.
Protestants find it offensive to refer to arithmetic or other operations as of some “law” or as works done by or through some “law” so to speak, although that term does appear as such in the original literature. It is something vaguely felt to be grammatically repulsive, almost as if in Spanish to imply, “bajo la ley” and not “sobre la ley” or above-board.
The term “law” is normally reserved in mathematical contexts for a formal probability measure over an event space.

Revision as of 11:57, 28 December 2024


An elliptic curve is in Edwards normal form[1] if it can be described by the equation

The more general original Edwards form has another parameter c

but it is very simple to eliminate the scale parameter c and reduce this equation to its normal form for ease of performing algebraic group operations on rational points or finite fields.

The twist

There is also a “twisted” Edwards form

And this brings us back to the ancient Greek word στραγγός with the idea of using something “twisted” for strong cryptography.

Point group arithmetic

The point group operation on an elliptic curve in the twisted Edwards form as defined above is defined as [2]

.

Protestants find it offensive to refer to arithmetic or other operations as of some “law” or as works done by or through some “law” so to speak, although that term does appear as such in the original literature. It is something vaguely felt to be grammatically repulsive, almost as if in Spanish to imply, “bajo la ley” and not “sobre la ley” or above-board.

The term “law” is normally reserved in mathematical contexts for a formal probability measure over an event space.

  1. Harold M. Edwards. “A normal form for elliptic curves.” Bulletin of the American Mathematical Society, vol. 44, no. 3, Jul 2007, pp. 393–422. https://www.ams.org/journals/bull/2007-44-03/S0273-0979-07-01153-6/
  2. Daniel J. Bernstein, Peter Birkner, Marc Joye, Tanja Lange, and Christiane Peters. “Twisted Edwards Curves.” Cryptology ePrint Archive, vol. 2008, no. 013 https://eprint.iacr.org/2008/013.pdf