A note on the Ate pairing

The Ate pairing has been suggested since it can be computed efficiently on ordinary elliptic curves with small values of the traces of Frobenius t. However, not all pairing-friendly elliptic curves have this property. In this paper, we generalize the Ate pairing and find a series of variations of the Ate pairing. We show that the shortest Miller loop of the variations of the Ate pairing can possibly be as small as r1/(k) on more pairing-friendly curves generated by the method of complex multiplications, and hence speed up the pairing computation significantly.

• Type: Journal
• Year: 2008
• Where: IJISEC
• Authors: Changan Zhao, Fangguo Zhang, Jiwu Huang
• Keywords: Elliptic Curves, IJISEC 2008, Ordinary Elliptic Curves, Pairing