PAIRING COMPUTATION DEVICE, PAIRING COMPUTATION METHOD, AND RECORDING MEDIUM WHERE PAIRING COMPUTATION PROGRAM IS RECORDED

摘要

A paring computation device, a pairing computation method, and a recording medium where a pairing computation program is recorded all enabling a pairing computation at high speed. An Ate pairing e(Q, P) is defined as formula (I). If k is an integral multiple of 3, 4, or 6, the computation of a rational function necessary to derive a Miller function fs,Q(P) is conducted in a true subfield specified by a twist curve using a quadratic or third-power non-residue v which takes on one when exponentiation of fs,Q(P) to (qk-1)/r-th power is carried out.