Paper 2025/672 Original: eprint.iacr.org/2025/672 ↗
Simpler and Faster Pairings from the Montgomery Ladder
Abstract
We show that Montgomery ladders compute pairings as a by-product, and explain how a small adjustment to the ladder results in simple and efficient algorithms for the Weil and Tate pairing on elliptic curves using cubical arithmetic. We demonstrate the efficiency of the resulting cubical pairings in several applications from isogeny-based cryptography. Cubical pairings are simpler and more performant than pairings computed using Miller's algorithm: we get a speed-up of over 40% for use-cases in SQIsign, and a speed-up of about 7% for use-cases in CSIDH. While these results arise from a deep connection to biextensions and cubical arithmetic, in this article we keep things as concrete (and digestible) as possible. We provide a concise and complete introduction to cubical arithmetic as an appendix.
Metadata
- Available format(s)
PDF- Category
- Implementation
- Publication info
- Preprint.
- History
- 2025-04-14: last updated
- 2025-04-14: published
- Short URL
- https://ia.cr/2025/672
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2025/672,
author = {Giacomo Pope and Krijn Reijnders and Damien Robert and Alessandro Sferlazza and Benjamin Smith},
title = {Simpler and Faster Pairings from the Montgomery Ladder},
howpublished = {Cryptology {ePrint} Archive, Paper 2025/672},
year = {2025},
url = {https://eprint.iacr.org/2025/672}
}