Inverting the Final Exponentiation of Tate Pairings on Ordinary Elliptic Curves Using Faults

  • Ronan Lashermes
  • Jacques Fournier
  • Louis Goubin
Conference paper

DOI: 10.1007/978-3-642-40349-1_21

Part of the Lecture Notes in Computer Science book series (LNCS, volume 8086)
Cite this paper as:
Lashermes R., Fournier J., Goubin L. (2013) Inverting the Final Exponentiation of Tate Pairings on Ordinary Elliptic Curves Using Faults. In: Bertoni G., Coron JS. (eds) Cryptographic Hardware and Embedded Systems - CHES 2013. CHES 2013. Lecture Notes in Computer Science, vol 8086. Springer, Berlin, Heidelberg

Abstract

The calculation of the Tate pairing on ordinary curves involves two major steps: the Miller Loop (ML) followed by the Final Exponentiation (FE). The first step for achieving a full pairing inversion would be to invert this FE, which in itself is a mathematically difficult problem. To our best knowledge, most fault attack schemes proposed against pairing algorithms have mainly focussed on the ML. They solved, if at all, the inversion of the FE in some special ‘easy’ cases or even showed that the complexity of the FE is an intrinsic countermeasure against a successful full fault attack on the Tate pairing. In this paper, we present a fault attack on the FE whereby the inversion of the final exponentiation becomes feasible using 3 independent faults.

Keywords

Tate pairing Ate pairing final exponentiation fault attacks 

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

Copyright information

© Springer-Verlag Berlin Heidelberg 2013

Authors and Affiliations

  • Ronan Lashermes
    • 1
    • 2
  • Jacques Fournier
    • 1
  • Louis Goubin
    • 2
  1. 1.CEA-TechRegGardanneFrance
  2. 2.UVSQ-PRiSMVersaillesFrance

Personalised recommendations