Skip to main content
Cryptography

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

Required fields*

7
  • $\begingroup$ As a side quetion, would this inversion algorithm work in the case of pairings without final exponentiation like the ate or optimal ate pairing ? $\endgroup$ Commented Jul 9 at 11:50
  • $\begingroup$ Is not the point denoted $A$ the parameter in question? $\endgroup$ Commented Jul 9 at 12:29
  • $\begingroup$ @DanielS in such case, $F_r$ is the finite field element and $d$ is the embedding degree ? $\endgroup$ Commented Jul 9 at 12:51
  • $\begingroup$ AIUI he is using $v$ as the target finite field value and $d$ as the multiplicity of the Miller function (i.e. we're finding $h_{d,A}(Q)=v$ where $h_{d,A}$ is a function with divisor $d[A]-[dA]-(d-1)[\mathcal O]$ $\endgroup$ Commented Jul 9 at 13:00
  • $\begingroup$ @DanielS so $d$ is a specific parameter which is dependent of the pairing being used ? $\endgroup$ Commented Jul 9 at 13:06