摘要 |
A device and method realizing safe, high-speed computation of hyperelliptic encryption. The speed of scalar multiplication of a factor D of hyperelliptic curve encryption is increased by executing computation including 1/2 multiplication. For example, scalar computation including 1/2 multiplication of a factor D of a hyperelliptic encryption curve having parameters h(x)=x2+x+h0 and f4=0 with a genus of 2 and a characteristic of 2, or parameters h(x)= x2+h1x+h0 and f4=0, or a parameter h(x)=x is executed. According to the [1/2iD] computation value of a fixed factor D, a table where which of k1, k1', and (k0, k0') is right is recorded is applied and inverse element operation is reduced, thereby, reducing the amount of computation and increasing the computation speed.
|