Affine Pairings on ARM

We report on relative performance numbers for affiffine and

projective pairings on a dual-core Cortex A9 ARM processor. Using a

fast inversion in the base fifield and doing inversion in extension fields by

using the norm map to reduce to inversions in smaller fifields, we fifind

a very low ratio of inversion-to-multiplication costs. In our implementation, this favors using affiffine coordinates, even for the current 128-bit

minimum security level specified by NIST. We use Barreto-Naehrig (BN)

curves and report on the performance of an optimal ate pairing for curves

covering security levels between 128 and 192 bits. We compare with other

reported performance numbers for pairing computation on ARM CPUs.

PDF file

In  Lecture Notes in Computer Science 7708, Pairing-based Cryptography -- Pairing 2012

Publisher  Springer Verlag


> Publications > Affine Pairings on ARM