0
$\begingroup$

Let $E(\mathbb{F_q})$ - elliptic curve.

$G_1 = E(\mathbb{F_q})[r]$. $|G_1| = r$.

$k$ is minimal such $r | q^k - 1$.

$\pi_q$ - $q$-power Frobenius endomorphism.

$G_2 = E(\mathbb{F_{q^k}})[r] \cap Ker([q] - \pi_q)$.

$\mu_r =$ {$z \in \mathbb{F_{q^k}}: z^r = 1$}.

$f_{s, P} \in \mathbb{F_q}(E)$: div$(f_{s, P}) =s(P) - ([s]P) - (s-1)(O)$.

Let $f_{s, P}^{(q^k - 1)/r}(Q)$ is non-degenerate bilinear pairing from $G_1 \times G_2 \to \mu_r$

Is it true that $r | s$ or $r | (s^k - 1)$ ?

Improve this question
$\endgroup$
2
  • $\begingroup$ Is there any relation between $s$ and $q$? What are $P$ and $Q$? $\endgroup$
    – Srilakshmi
    Commented Mar 20, 2013 at 20:02
  • $\begingroup$ @Srilakshmi $q$ is fixing number. $s$ is so number that $f_{s,P}^{(q^k-1)/r}(Q)$ is non-degenerate bilinear pairing. $P$ is point from $G_1$ and $Q$ is point from $G_2$ $\endgroup$
    – Alexey
    Commented Mar 21, 2013 at 21:47

1 Answer 1

Reset to default
1
$\begingroup$

The groups $G_1$ and $G_2$ are generated by $P$ and $Q$ respecively. For every $s$, $f_{s,P}$ is the Miller function associated with $s$. In Optimized (lower degree Miller functions) pairing, one imposed condition on $s$ is : $s \equiv q \pmod r$. The integer $k$ is minimal such that $r$ $\mid$ ${q^k-1}$, which implies that $r$ $\mid$ $(s^k-1)$.

Improve this answer
$\endgroup$
1
  • $\begingroup$ It is not necessary condition for $s$. For example $s$ can be folowing: $s = q^i($mod$r)$. (google.ru/…) $\endgroup$
    – Alexey
    Commented Mar 23, 2013 at 13:47

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .