Coprocessors for Pairing-Based Cryptography

由于理论基础和实际考虑的适当组合，我们设计了几个硬件协处理器和软件库来计算在普通和超奇异椭圆曲线上的AES-128安全级别上的密码Tate配对。我们还提出了一种新的超奇异亏格-2超椭圆曲线上的配对算法。然而，为了设计用于基于配对的密码术的协处理器，有必要考虑辅助密码原语（诸如散列函数）的实现。由于NIST已经开放了一个公开的竞争，以开发一种新的加密哈希函数（SHA-3），我们决定通过为几个候选人设计紧凑的架构来为选择过程做出贡献。

Thanks to an appropriate mix of theoretical foundations and practical considerations, we designed several hardware coprocessors and software libraries to compute the cryptographic Tate pairing at the level of security of AES-128 over ordinary and supersingular elliptic curves. We also proposed a novel pairing algorithm over supersingular genus-2 hyperelliptic curves. In order to design a coprocessor for pairing-based cryptography, it is however necessary to consider the implementation of auxiliary cryptographic primitives, such as hash functions. Since the NIST has opened a public competition to develop a novel cryptographic hash function (SHA-3), we decided to contribute to the selection process by designing compact architectures for several candidates.