Elliptic Curve Cryptography Ladder Algorithm Efficiency

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current cryptographic operations, particularly those involving elliptic curve cryptography, face inefficiencies due to the need for numerous multiplication, squaring, and division operations, which are computationally expensive, especially on low-bit microprocessors like smart card readers and wireless sensor nodes.

Innovation Solution

The implementation of processor- and memory-efficient ladder-based algorithms such as the Montgomery ladder and Joye Double-Add ladder, which reduce the number of iterations and operations required by tracking specific differences and slopes, eliminating the need for explicit coordinate tracking and division operations through Jacobian transformations and rescaling.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If traditional elliptic curve multiplication methods are used, then cryptographic security is maintained, but the number of multiplication and division operations increases computational cost and processing time

Engineering Contradiction:
Improvecryptographic operation speedVSAvoidnumber of multiplication and division operations
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent transforms the coordinate representation parameters from standard (x, y) to modified projective coordinates (u, v, w) where u = x and v = y/w. This parameter transformation eliminates division operations during the main computation loop, as all operations can be performed using only multiplication and addition in the modified coordinate system. The division operations are deferred to a single final normalization step, dramatically reducing the total number of expensive division operations.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent replaces the traditional mechanical division operation with multiplication-based computations in the modified projective coordinate system. By expressing elliptic curve point operations in terms of (u, v, w) coordinates, the algorithm substitutes multiple division operations with multiplication operations, which are computationally cheaper and can be more efficiently implemented on low-bit microprocessors.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If coordinate tracking methods are used, then point operations are accurate, but memory usage and computational overhead increase

Engineering Contradiction:
Improvecryptographic operation accuracyVSAvoidmemory registers required
Core Design Contradiction:
ReliabilityVSQuantity of substance

Solution Approach 1:

The patent extracts and eliminates the need to track individual x and y coordinates separately by working directly with the transformed parameters (u, v, w). Instead of maintaining separate coordinate values that require multiple memory registers, the algorithm uses the compact parameter representation that achieves the same computational goals with fewer stored values, reducing memory register requirements while maintaining operational accuracy.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The modified projective coordinate parameters serve multiple functions simultaneously: u tracks the x-coordinate information, v tracks the scaled y-coordinate information, and w tracks the scaling factor. This multi-functional parameter system replaces what would traditionally require separate tracking of multiple coordinate components, reducing the overall memory footprint while maintaining the ability to perform accurate elliptic curve operations.

Inventive Principle:
Principle #6Universality (Multi-functionality)

Data Source

PatentUS12166878B2System and method to improve efficiency in multiplication_ladder-based cryptographic operations
Publication Date: 2024.12.10 CRYPTOGRAPHY RESEARCH INC
  • US12166878B2 patent drawing
  • US12166878B2 patent drawing
  • US12166878B2 patent drawing

AI summary

Aspects of the present disclosure involve a method to perform a cryptographic operation using a plurality of iterations, each of the plurality of iterations comprising: loading a first number corresponding to a difference between a first component of a first input working point on an elliptic curve and a first component of a second input working point on the elliptic curve, loading a second number corresponding to a difference between the first component of the first input working point and a first component of a third input working point on the elliptic curve, and determining a third number corresponding to a difference between a first component of a first output working point on the elliptic curve and the first component of the second input working point, wherein determining the third number comprises squaring a product of the first number and a first function of the second number.