Further refinements of Miller’s algorithm on Edwards curves

Abstract

Recently, Edwards curves have received a lot of attention in the cryptographic community due to their fast scalar multiplication algorithms. Then, many works on the application of these curves to pairing-based cryptography have been introduced. In this paper, we investigate refinements to Miller's algorithm that play a central role in paring computation. We first introduce a variant of Miller function that leads to a more efficient variant of Miller's algorithm on Edwards curves. Then, based on the new Miller function, we present a refinement to Miller's algorithm that significantly improves the performance in comparison with the original Miller's algorithm. Our analyses also show that the proposed refinement is approximately 25 % faster than Xu---Lin's refinements (CT-RSA, 2010). Last but not least, our approach is generic, hence the proposed algorithms allow to compute both Weil and Tate pairings on pairing-friendly Edwards curves of any embedding degree.