US2017207918A1PendingUtilityA1
Cryptography on an elliptical curve
Est. expiryJun 16, 2029(~2.9 yrs left)· nominal 20-yr term from priority
H04L 9/3066H04L 9/30H04L 9/002H04L 9/005G06F 7/725
48
PatentIndex Score
0
Cited by
0
References
0
Claims
Abstract
A cryptographic calculation includes obtaining a point P(X,Y) from a parameter t on an elliptical curve Y 2 =f(X); and from polynomials X1(t), X2(t), X3(t) and U(t) satisfying: f(X1(t))·f(X2(t))·f(X3(t))=U(t) 2 in Fq, with q=3 mod 4. Firstly a value of the parameter t is obtained. Next, the point P is determined by: (i) calculating X1=X1(t), X2=X2(t), X3=X3(t) and U=U(t); (ii) if the term f(X1)·f(X2) is a square, then testing whether the term f(X3) is a square in Fq and if so calculating the square root of f(X3) in order to obtain the point P(X3); (iii) otherwise, testing whether the term f(X1) is a square and, if so, calculating the square root of f(X1) in order to obtain the point P(X1); (iv) otherwise, calculating the square root of f(X2) in order to obtain the point P(X2). This point P is useful in a cryptographic application.
Claims
exact text as granted — not AI-modified1 . An electronic component configured to execute a cryptographic calculation and to obtain a point P(X,Y) from at least one parameter t, on an elliptical curve that satisfies the equation: Y 2 =f(X) and from polynomials X 1 (t), X 2 (t), X 3 (t) and U(t) satisfying the following Skalba equality: f(X1(t))·f(X2(t))·f(X3(t))=U(t) 2 in a finite field F q , regardless of the parameter t, q satisfying the equation q=3 mod 4, wherein said electronic component is configured to:
obtain a value of the parameter t; and
determine the point P by:
(i) calculating X 1 =X 1 (t), X 2 =X 2 (t), X 3 =X 3 (t) and U=U(t)
(ii) if the term f(X1)·f(X2) is a squared term in the finite field Fq then testing whether the term f(X 3 ) is a squared term in the finite field Fq and calculating the square root of the term f(X 3 ), point P having X 3 as abscissa and the square root of the term f(X3) as ordinate;
(iii) otherwise, testing whether the term f(X 1 ) is a squared term in the finite field Fq and in this case, calculating the square root of the term f(X 1 ), point P having X 1 as abscissa and the square root of the term f(X 1 ) as ordinate;
(iv) otherwise, calculating the square root of the term f(X 2 ), point P having X 2 as abscissa and the square root of the term f(X 2 ) as ordinate;
wherein said electronic component is further configured to use said point P in a cryptographic application selected from the group consisting of encryption or hashing or signature or authentication or identification,
wherein the cryptographic calculation is an application of authentication or identification by a checking entity, and
wherein obtaining the value of the parameter t further comprises:
/a/ generating a random value;
/b/ obtaining an encrypted value by encrypting said random value based on an encryption function using an encryption key determined from a password or identifier corresponding to the parameter; and
/c/ transmitting the encrypted value to the checking entity.
2 . The electronic component according to claim 1 , wherein in order to determine the point P said electronic component is further configured to:
calculate R 1 such that:
R
1
=
(
f
(
X
1
)
·
f
(
X
2
)
)
q
+
1
4
if R 1 2 is equal to f(X1)·f(X 2 ), then decide whether the term f(X1)·f(X2) is a squared term in the field F q ;
test whether the term f(X 1 ) is a squared term in the finite field F q by:
calculating R 2 ′ such that:
R
2
′
=
f
(
X
1
)
q
-
1
-
q
+
1
4
calculating R 3 ′ such that:
R′ 3 =R′ 2 2
calculating R 4 ′ such that:
R′ 4 =R′ 3 ·f ( X 1 )
if R 4 ′ is not equal to 1, obtain the square roof of the term f(X 2 ) from the following equation:
√{square root over ( f ( X 2 ))}= R 1 ·R′ 2 .
3 . The electronic component according to claim 1 , wherein the polynomials that satisfy Skalba's equality are expressed in Jacobian coordinates according to which the point P(X,Y) is written P(X′,Y′,Z) such that:
X′=X·Z 2 ,
Y′=Y·Z 3
wherein the function f is written f z (X′) and satisfies:
f z ( X ′)= X′ 3 +a·X′·Z 4 +b·Z 6
with the elliptical curve satisfying the equation:
Y′ 2 =f z ( X ′)
in which the polynomials that satisfy Skalba's equality expressed in Jacobian coordinates are X′ 1 (t), X′ 2 (t), X′ 3 (t), Z(t) and U′(t) and satisfy Skalba's equality in Jacobian coordinates:
U ′( t ) 2 =f Z(t) ( X′ 1 ( t ))· f Z(t) ( X′ 2 ( t ))· f Z(t) ( X′ 3 ( t ))
and in which Z(t) is determined in such a way that the operations of inversion are transformed into operations of multiplication.
4 . The electronic component according to claim 1 , wherein the polynomials that satisfy Skalba's equality are such that it is possible to set a value of X 3 (t) for any possible t, such that f(X 3 (t)) is never a squared term in Fq, and
wherein when determining the point P, the term f(X 1 )·f(X 2 ) is not a squared term in the finite field F q , wherein determining the point P further comprises testing whether the term f(X 1 ) is a squared term in the finite field F q by:
calculating R 2 ′ such that:
R
2
′
=
f
(
X
1
)
q
-
1
-
q
+
1
4
calculating R 3 ′ such that:
R′ 3 =R′ 2 2
calculating R 4 ′ such that:
R′ 4 =R′ 3 ·f ( X 1 )
wherein, if R 4 ′ is not equal to 1, determining the point P further comprises obtaining the square root of the term f(X 2 ) according to the following equation:
f
(
X
2
)
=
R
1
·
R
2
′
R
1
=
(
f
(
X
1
)
·
f
(
X
2
)
)
q
+
1
4
Where
in which R1 is obtained beforehand from the following equation:
R
1
=
(
f
(
X
)
·
f
(
X
2
)
)
q
+
1
4
=
U
·
f
(
u
)
q
-
1
-
q
+
1
4
.
5 . The electronic component according to claim 4 , wherein the polynomials that satisfy Skalba's equality are expressed in Jacobian coordinates according to which the point P(X,Y) is written P(X′,Y′,Z) such that:
X′=X·Z 2 ,
Y′=Y·Z 3
where the function f is written f z (X′) and satisfies:
f z ( X ′)= X′ 3 +a·X·Z 4 +b·Z 6
with the elliptical curve satisfying the equation:
Y′ 2 =f Z ( X ′)
in which the polynomials that satisfy Skalba's equality expressed in Jacobian coordinates are X′1(t), X′2(t), Z(t) and U′(t) and satisfy Skalba's equality in Jacobian coordinates:
U ′( t ) 2 =f Z(t) ( X′ 1 ( t ))· f Z(t) ( X′ 2 ( t ))· f ( X 3 ( t ))
and in which Z(t) is determined in such a way that operations of inversion are transformed into operations of multiplication.
6 . The electronic component according to claim 1 , wherein obtaining the value of the parameter t comprises obtaining the value of the parameter t as a function of a password or an identifier.Join the waitlist — get patent alerts
Track US2017207918A1 — get alerts on status changes and closely related new filings.
We store only your email — no account needed. See our privacy policy.