Efficient Isogeny Computations on Twisted Edwards Curves

<table class="fixed-width table-group" id="tab1"><tr><td><table class="table"><colgroup><col style="width:4.99em"/><col style="width:4.89em"/><col style="width:5.95em"/><col style="width:7.00em"/><col style="width:4.89em"/></colgroup><tr><td class="thead-hr" colspan="5"><hr/></td></tr><tr class="thead"><td class="align_left">Field size </td><td class="align_center">Addition</td><td class="align_center">Subtraction</td><td class="align_center">Multiplication</td><td class="align_center">Squaring</td></tr><tr><td class="thead-hr" colspan="5"><hr/></td></tr><tr><td class="align_left"> <svg height="10.2124pt" id="M467" style="vertical-align:-3.42943pt" version="1.1" viewbox="-0.0498162 -6.78297 21.3544 10.2124" width="21.3544pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M570 304C570 398 525 448 414 448C385 448 343 445 312 434L329 511L321 518C297 504 262 482 244 460L233 411C195 397 159 381 128 358L135 332C160 347 189 360 224 373L111 -147C97 -210 84 -218 17 -231L13 -257L254 -247L259 -218L233 -216C183 -212 177 -202 189 -142L218 -1C238 -10 266 -12 283 -12C351 3 429 48 483 105C543 168 570 242 570 304ZM482 289C482 161 380 33 304 33C278 33 248 51 233 69L303 396C326 400 352 403 369 403C428 403 482 380 482 289Z" id="g113-113"></path></g><g transform="matrix(.0091,0,0,-0.0091,7.384,3.132)"><path d="M158 548H390L417 615L410 623H122L83 318C105 326 143 337 185 337C296 337 350 275 350 188C350 116 308 42 225 42C164 42 122 74 100 93C90 101 82 99 72 92C60 82 51 68 50 59C48 46 52 38 66 24C82 9 125 -12 172 -12C225 -11 292 15 346 59C408 108 437 166 437 226C437 309 371 397 242 397C214 397 170 382 133 369L158 548Z" id="g50-54"></path></g><g transform="matrix(.0091,0,0,-0.0091,11.816,3.132)"><path d="M245 635C92 635 37 457 37 312C37 149 91 -12 244 -12C395 -12 449 166 449 312C449 469 395 635 245 635ZM243 598C332 598 358 454 358 312C358 173 334 26 245 26C158 26 128 174 128 313S152 598 243 598Z" id="g50-49"></path></g><g transform="matrix(.0091,0,0,-0.0091,16.248,3.132)"><path d="M290 377C321 398 342 415 358 430C378 450 389 473 389 502C389 578 329 635 238 635H237C184 635 137 610 109 578L64 515L88 493C112 529 154 573 208 573S303 542 303 482C303 409 233 370 141 341L149 308C165 313 190 319 215 319C272 319 341 283 341 193C342 98 292 43 222 43C163 43 122 72 96 94C88 101 79 100 70 94C61 87 47 73 46 60C44 47 48 37 62 23C76 10 118 -12 165 -12C238 -12 430 62 430 223C430 297 379 359 290 375V377Z" id="g50-52"></path></g></svg></td><td class="align_center">79</td><td class="align_center">62</td><td class="align_center">795</td><td class="align_center">640</td></tr><tr><td class="align_left"> <svg height="10.2124pt" id="M468" style="vertical-align:-3.42943pt" version="1.1" viewbox="-0.0498162 -6.78297 21.3544 10.2124" width="21.3544pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M570 304C570 398 525 448 414 448C385 448 343 445 312 434L329 511L321 518C297 504 262 482 244 460L233 411C195 397 159 381 128 358L135 332C160 347 189 360 224 373L111 -147C97 -210 84 -218 17 -231L13 -257L254 -247L259 -218L233 -216C183 -212 177 -202 189 -142L218 -1C238 -10 266 -12 283 -12C351 3 429 48 483 105C543 168 570 242 570 304ZM482 289C482 161 380 33 304 33C278 33 248 51 233 69L303 396C326 400 352 403 369 403C428 403 482 380 482 289Z" id="g113-113"></path></g><g transform="matrix(.0091,0,0,-0.0091,7.384,3.132)"><path d="M453 623H65C60 580 56 530 46 472H80C103 538 110 548 175 548H389C310 380 195 168 90 0L98 -12L175 -2C273 206 366 408 462 610L453 623Z" id="g50-56"></path></g><g transform="matrix(.0091,0,0,-0.0091,11.817,3.132)"><path d="M158 548H390L417 615L410 623H122L83 318C105 326 143 337 185 337C296 337 350 275 350 188C350 116 308 42 225 42C164 42 122 74 100 93C90 101 82 99 72 92C60 82 51 68 50 59C48 46 52 38 66 24C82 9 125 -12 172 -12C225 -11 292 15 346 59C408 108 437 166 437 226C437 309 371 397 242 397C214 397 170 382 133 369L158 548Z" id="g50-54"></path></g><g transform="matrix(.0091,0,0,-0.0091,16.249,3.132)"><path d="M389 0V32C297 38 291 46 291 118V635C234 613 175 595 109 583V556L161 554C203 552 207 547 207 497V118C207 46 201 38 110 32V0H389Z" id="g50-50"></path></g></svg></td><td class="align_center">120</td><td class="align_center">102</td><td class="align_center">1593</td><td class="align_center">1260</td></tr><tr class="table-tr"><td colspan="5"><hr class="tbody-hr"/></td></tr></table></td></tr></table>

<div>Cycle counts of the field operations over <span class="nowrap"><svg height="14.1623pt" id="M466" style="vertical-align:-5.47421pt" version="1.1" viewbox="-0.0498162 -8.68809 15.8918 14.1623" width="15.8918pt" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><g transform="matrix(.013,0,0,-0.013,0,0)"><path d="M567 618V662H70V0H236V304H501V348H236V618H567ZM192 44H114V618H192V44Z" id="g197-17"></path></g><g transform="matrix(.0091,0,0,-0.0091,6.097,3.132)"><path d="M573 302C573 402 527 451 414 451C386 451 343 446 313 437L330 513L320 522C295 508 261 484 243 463L230 415C194 400 159 383 126 359L131 330C159 344 187 357 222 368L109 -147C96 -204 80 -214 18 -223L13 -255L256 -244L259 -212L236 -210C184 -205 180 -195 191 -141L219 -1C240 -10 268 -12 284 -12C352 4 431 48 484 104C543 166 573 240 573 302ZM481 290C481 165 381 37 305 37C280 37 249 56 235 71L302 395C328 399 353 402 372 402C427 402 481 378 481 290Z" id="g50-113"></path></g><g transform="matrix(.0065,0,0,-0.0065,11.53,-.065)"><path d="M452 139L416 148C386 81 373 77 319 77H141L282 220C372 312 414 373 414 464C414 569 332 635 240 635C181 635 132 609 101 574L42 493L70 467C98 506 143 562 209 562C280 562 324 515 324 435C324 347 261 272 197 197C148 139 89 84 34 29V0H417L452 139Z" id="g176-51"></path></g></svg>.</span></div>

Security and Communication Networks

Efficient Isogeny Computations on Twisted Edwards Curves

Table 1