We present a new "cover and decomposition" attack on the elliptic curve discrete logarithm problem, that combines Weil descent and decomposition-based index calculus into a single discrete logarithm algorithm. This attack applies, at least theoretically, to all composite degree extension fields, and is particularly well-suited for curves defined over F p6. We give a real-size example of discrete logarithm computations on a curve over a 151-bit degree 6 extension field, which would not have been practically attackable using previously known algorithms. © 2012 International Association for Cryptologic Research.
CITATION STYLE
Joux, A., & Vitse, V. (2012). Cover and decomposition index calculus on elliptic curves made practical application to a previously unreachable curve over F p6. In Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) (Vol. 7237 LNCS, pp. 9–26). https://doi.org/10.1007/978-3-642-29011-4_3
Mendeley helps you to discover research relevant for your work.