Paper 2026/1049 Original: eprint.iacr.org/2026/1049 ↗
Decomposition of the Ate Pairing and its Relation to Generalized Pairing Inversion
Abstract
In this note, we study decomposition of the Ate pairing on certain elliptic curves defined over finite fields. As an application, we reduce a generalized pairing inversion to root findings of an element of the affine coordinate ring appearing in the decomposition. For a supersingular curve $E / {\bf F}_q$ satisfying $\sharp E( {\bf F}_q ) = q+1$, heuristic observation suggests that a number of calls to a root finding algorithm seems to $O( N )$ where $N$ is the maximal power of $2$ dividing $q+1$. It is remarkable that the resulting algorithm does not utilize fixed argument pairing inversions. An underlying key observation is that the Miller function forms a factor system.
Metadata
- Available format(s)
PDF- Category
- Foundations
- Publication info
- Preprint.
- History
- 2026-05-25: last updated
- 2026-05-25: published
- Short URL
- https://ia.cr/2026/1049
- License
- https://creativecommons.org/licenses/by/4.0/
BibTeX
@misc{cryptoeprint:2026/1049,
author = {Takakazu Satoh},
title = {Decomposition of the Ate Pairing and its Relation to Generalized Pairing Inversion},
howpublished = {Cryptology {ePrint} Archive, Paper 2026/1049},
year = {2026},
url = {https://eprint.iacr.org/2026/1049}
}