Montgomery curves and the Montgomery ladder

Daniel J.  Bernstein; Tanja Lange

Paper 2017/293 Original: eprint.iacr.org/2017/293 ↗

Montgomery curves and the Montgomery ladder

Daniel J. Bernstein

Tanja Lange

Abstract

The Montgomery ladder is a remarkably simple method of computing scalar multiples of points on a broad class of elliptic curves. This article surveys a wide range of topics related to the Montgomery ladder, both from the historical perspective of Weierstrass curves and from the modern perspective of Edwards curves. New material includes a full proof of a complete constant-time ladder algorithm suitable for cryptographic applications.

Metadata

Available format(s): PDF
Category: Public-key cryptography
Publication info: Preprint.
History: 2017-04-03: last updated; 2017-04-03: published
Short URL: https://ia.cr/2017/293
License: https://creativecommons.org/licenses/by/4.0/

BibTeX

@misc{cryptoeprint:2017/293,
      author = {Daniel J.  Bernstein and Tanja Lange},
      title = {Montgomery curves and the Montgomery ladder},
      howpublished = {Cryptology {ePrint} Archive, Paper 2017/293},
      year = {2017},
      url = {https://eprint.iacr.org/2017/293}
}