Some New Methods to Generate Short Addition Chains

Authors

  • Yuanchao Ding School of Cyber Science and Technology, Beihang University, Beijing, China; State Key Laboratory of Cryptology, P.O. Box, Beijing, China
  • Hua Guo School of Cyber Science and Technology, Beihang University, Beijing, China; State Key Laboratory of Cryptology, P.O. Box, Beijing, China
  • Yewei Guan School of Cyber Science and Technology, Beihang University, Beijing, China; State Key Laboratory of Software Development Environment, Beihang University, Beijing, China
  • Hutao Song School of Cyber Science and Technology, Beihang University, Beijing, China; State Key Laboratory of Software Development Environment, Beihang University, Beijing, China
  • Xiyong Zhang Beijing Institute of Satellite Information Engineering, Beijing, China
  • Jianwei Liu School of Cyber Science and Technology, Beihang University, Beijing, China

DOI:

https://doi.org/10.46586/tches.v2023.i2.270-285

Keywords:

addition chain, window method, simplified power-tree method, cross window method, addition sequence

Abstract

Modular exponentiation and scalar multiplication are important operations in most public-key cryptosystems, and their efficient computation is essential to cryptosystems. The shortest addition chain is one of the most important mathematical concepts to realize the optimization of computation. However, finding a shortest addition chain of length r is generally regarded as an NP-hard problem, whose time complexity is comparable to O(r!). This paper proposes some novel methods to generate short addition chains. We firstly present a Simplified Power-tree method by deeply deleting the power-tree whose time complexity is reduced to O(r2). In this paper, a Cross Window method and its variant are introduced by improving the Window method. The Cross Window method uses the cross correlation to deal with the windows and its pre-computation is optimized by a new Addition Sequence Algorithm. The theoretical analysis is conducted to show the correctness and effectiveness. Meanwhile, our experiments show that the new methods can obtain shorter addition chains compared to the existing methods. The Cross Window method with the Addition Sequence algorithm can attain 44.74% and 9.51% reduction of the addition chain length, in the best case, compared to the Binary method and the Window method respectively.

Downloads

Published

2023-03-06

Issue

Section

Articles

How to Cite

Some New Methods to Generate Short Addition Chains. (2023). IACR Transactions on Cryptographic Hardware and Embedded Systems, 2023(2), 270-285. https://doi.org/10.46586/tches.v2023.i2.270-285