ecfactory

ecfactory copied to clipboard

This PR adds a module for BLS12 curves. Note that the search, similarly to the code for BN curves, does not implement the subgroup security check mentioned in #3.

Nashtare

Subgroup security of the BN curve searching

3

The current implementation in `ecfactory` to search BN curves did not evaluate the subgroup security, as discussed in https://eprint.iacr.org/2015/247.pdf. Mainly, pairing might be subject to subgroup attacks. To prevent such...

weikengchen

Hello, While trying to run in `cocks_pinch_example.py` the first example `cp.gen_params_from_r(r,k)` using large values for `r`, for example a 256-bit long integer, I run into this issue : ``` 5361...

Sbargaoui

mkoeppe

https://eprint.iacr.org/2024/1737.pdf > When an elliptic curve E1/Fq is of prime order r, there always exists another elliptic curve E2/Fr of order q, i.e. a 2-cycle between E1 and E2. This...

ytrezq

For any binary curve, the aim is to map the discrete logarithm to an hyperelliptic curve. It’s something as much well known as pairings. See https://hal.science/hal-01121942/document for details.

ytrezq