IP Library Granted Patent US 9,729,323
Granted Patent B2
US 9,729,323 · App. 14/634,998 · Granted Aug 8, 2017

Method of cryptographic processing of data on elliptic curves, corresponding electronic device and computer program product

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 9,729,323
App. No.
14/634,998
Granted
Aug 8, 2017
Kind
B2
Abstract

In one embodiment, it is proposed a method of cryptographic processing of data, the method being executed by an electronic device, and comprising obtaining at least two points belonging to a same elliptic curve defined on an algebraic structure being a finite ring, each point being represented by at least two coordinates. The method is remarkable in that it comprises: obtaining a parameterization of an isomorphism between said elliptic curve and another elliptic curve, said parameterization defining some configuration parameters, each configuration parameter having a range of possible values; determining in function of values of coordinates of said at least two points said configuration parameters, delivering determined configuration parameters; and obtaining coordinates of another point corresponding to an image of an addition of said at least two points through said isomorphism, said another point belonging to said another elliptic curve, and said obtaining being performed without an inversion operation in said algebraic structure, due to said determined configuration parameters.

Claims (25)

1. A method of cryptographic processing of data, the method being executed by an electronic device comprising a memory and at least one hardware processor coupled to said memory, the method comprising obtaining at least two points represented in an affine coordinate system, and denoted respectively P 1 =(x 1 , y 1 ) and P 2 =(X 2 , y 2 ) belonging to a same elliptic curve defined on an algebraic structure being a finite ring, wherein the method further comprises:

obtaining a parameterization of an isomorphism ψ between said elliptic curve, denoted as E (i-1) and another elliptic curve, denoted as E (i) , said parameterization defining some configuration parameters being either equal to u, when a Weierstrass model is used for representing said elliptic curves, wherein ψ(x, y)=(u 2 x,u 3 y), or being equal to u, r, s, t when a general Weierstrass model is used for representing said elliptic curve, wherein ψ(x, y)=(u 2 x+r, u 3 y+u 2 sx+t);

determining said configuration parameters as a function of values of coordinates of said at least two points, delivering determined configuration parameters, wherein u=x 1 −x 2 , or u=2y 1 ;

obtaining coordinates of another point denoted Q corresponding to an image of an addition of said at least two points through said isomorphism, said another point belonging to said another elliptic curve, and said obtaining being performed without an inversion operation in said algebraic structure, due to said determined configuration parameters, wherein Q=ψ(P 1 +P 2 ).

2. The method according to claim 1 , wherein when said at least two points are identical meaning P 1 is equal to P 2 , and said addition is a doubling operation.

3. The method according to claim 1 , wherein it is used in a scalar multiplication operation with a first point denoted P belonging to a first elliptic curve denoted E (0) .

4. The method according to claim 3 , wherein it comprises converting an output point of said scalar multiplication operation, said output point belonging to a last elliptic curve denoted E (l(k)) , to a converted output point belonging to said first elliptic curve.

5. The method according to claim 3 , wherein it further comprises determining configuration parameters r, s, t based on the previously used configuration parameters.

6. The method according to claim 1 , wherein said algebraic structure is a finite field having a characteristic equal to 2.

7. The method according to claim 1 , wherein said algebraic structure is a finite field having a characteristic equal to 3.

8. The method according to claim 1 , wherein said algebraic structure is a finite field having a characteristic equal to a prime number p>3.

9. A non-transitory computer-readable storage medium storing a computer program comprising a set of computer-executable instructions to implement a method for cryptographic computations when the instructions are executed by a hardware processor of a computer, wherein the instructions comprise instructions, which when executed, configure the hardware computer to perform a method of cryptographic processing of data, the method comprising:

obtaining at least two points represented in an affine coordinate system, and denoted respectively P 1 =(x 1 , y 1 ) and P 2 =(x 2 ,y 2 ) belonging to a same elliptic curve defined on an algebraic structure being a finite ring;

obtaining a parameterization of an isomorphism ψ between said elliptic curve denoted as E (i-1) and another elliptic curve denoted as E (i) , said parameterization defining some configuration parameters being either equal to u, when a Weierstrass model is used for representing said elliptic curves, wherein ψ(x, y)=(u 2 x,u 3 y), or being equal to u, r, s, t when a general Weierstrass model is used for representing said elliptic curve, wherein ψ(x, y)=(u 2 x+r, u 3 y+u 2 sx+t);

determining said configuration parameters as a function of values of coordinates of said at least two points, delivering determined configuration parameters, wherein u=x 1 −x 2 , or u=2y 1 ;

obtaining coordinates of another point denoted Q corresponding to an image of an addition of said at least two points through said isomorphism, said another point belonging to said another elliptic curve, and said obtaining being performed without an inversion operation in said algebraic structure, due to said determined configuration parameters, wherein Q=ψ(P 1 +P 2 ).

10. An electronic device configured to perform a cryptographic processing of data, said electronic device comprising a memory and at least one hardware processor coupled to the memory, the at least one hardware processor being configured to obtain at least two points represented in an affine coordinate system, and denoted respectively P 1 =(x 1 , y 1 ) and P 2 =(x 2 , y 2 ) belonging to a same elliptic curve defined on an algebraic structure being a finite ring, wherein the at least one hardware processor is further configured to:

obtain a parameterization of an isomorphism ψ between said elliptic curve denoted as E (i-1) and another elliptic curve, denoted as E (i) , said parameterization defining some configuration parameters, being either equal to u, when a Weierstrass model is used for representing said elliptic curves, wherein ψ(x, y)=(u 2 x, u 3 y), or being equal to u, r, s, t when a general Weierstrass model is used for representing said elliptic curve, wherein ψ(x, y)=(u 2 x+r, u 3 y+u 2 sx+t);

determine said configuration parameters as a function of values of coordinates of said at least two points, delivering determined configuration parameters, wherein u=x 1 −x 2 , or u=2y 1 ;

obtain coordinates of another point denoted Q corresponding to an image of an addition of said at least two points through said isomorphism, said another point belonging to said another elliptic curve, without performing an inversion operation in said algebraic structure, due to said determined configuration parameters, wherein Q=ψ(P 1 +P 2 ).

11. The electronic device according to claim 10 , wherein when said at least two points are identical meaning P 1 is equal to P 2 , and said addition is a doubling operation.

12. The electronic device according to claim 10 , wherein said at least one hardware processor is further configured to perform a scalar multiplication operation with a first point denoted P belonging to a first elliptic curve denoted E (0) .

13. The electronic device according to claim 12 , wherein said hardware processor is further configured to determine configuration parameters r, s, t based on the previously used configuration parameters.

14. The electronic device according to claim 12 , wherein said at least one hardware processor is further configured to convert an output point of said scalar multiplication operation, said output point belonging to a last elliptic curve denoted E (l(k)) , to a converted output point belonging to said first elliptic curve.

15. The electronic device according to claim 10 , wherein said algebraic structure is further a finite field having a characteristic equal to a prime number p>3.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Aug 20, 2020
From: THOMSON LICENSING S.A.S.
To: MAGNOLIA LICENSING LLC
Reel/Frame 053570/0237 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Apr 6, 2018
From: JOYE, MARC; GOUNDAR, RAVEEN
To: THOMSON LICENSING
Reel/Frame 045465/0497 →