Edwards normal form
An elliptic curve is in Edwards normal form[1] if it can be described by the equation
The more general original Edwards form has another parameter c
but it is very simple to eliminate the scale parameter c and reduce this equation to its normal form for ease of performing algebraic group operations on rational points or finite fields.
The twist
There is also a “twisted” Edwards form
And this brings us back to the ancient Greek word στραγγός with the idea of using something “twisted” for strong cryptography.
Point group arithmetic
The point group operation on an elliptic curve in the twisted Edwards form as defined above is defined as [2]
- .
Protestants find it offensive to refer to arithmetic or other operations as of some “law” or as works done by or through some “law” so to speak, although that term does appear as such in the original literature. It is something vaguely felt to be grammatically repulsive, almost as if in Spanish to imply, “bajo la ley” and not “sobre la ley” or above-board.
The term “law” is normally reserved in mathematical contexts for a formal probability measure over an event space.
- ↑ Harold M. Edwards. “A normal form for elliptic curves.” Bulletin of the American Mathematical Society, vol. 44, no. 3, Jul 2007, pp. 393–422. https://www.ams.org/journals/bull/2007-44-03/S0273-0979-07-01153-6/
- ↑ Daniel J. Bernstein, Peter Birkner, Marc Joye, Tanja Lange, and Christiane Peters. “Twisted Edwards Curves.” Cryptology ePrint Archive, vol. 2008, no. 013 https://eprint.iacr.org/2008/013.pdf