Elliptic Curve SWU Encoding Correction for Coordinate Interoperability

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

In elliptic curve cryptography, the simplified Shallue-Woestijne-Ulas (SWU) encoding function can produce different points when implemented in different coordinate systems, leading to interoperability issues and potential signature verification failures.

Innovation Solution

The SWU encoding function is modified by adding correction steps to ensure that the same point is obtained across different coordinate systems, such as affine and Jacobian representations, by adjusting elements like Z and Y coordinates to account for the Legendre symbol and quadratic residues.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If the simplified SWU encoding function is implemented in different coordinate systems (affine vs Jacobian), then computational efficiency is improved, but the obtained points become opposite points leading to interoperability failures

Engineering Contradiction:
Improvecomputational efficiencyVSAvoidinteroperability reliability
Core Design Contradiction:
ProductivityVSReliability

Solution Approach 1:

The patent introduces an intermediary correction mechanism using the Legendre symbol to mediate between different coordinate system implementations. The Legendre symbol acts as a mediator that detects and corrects the sign discrepancy between affine and Jacobian coordinate representations, allowing devices using different coordinate systems to interoperably generate the same cryptographic points without sacrificing computational efficiency

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent applies parameter changes by modifying the SWU encoding function to include a sign correction parameter based on the Legendre symbol. This parameter dynamically adjusts the y-coordinate sign depending on the coordinate system being used, ensuring that the final encoded point is consistent across different implementations while maintaining the computational advantages of each coordinate system

Inventive Principle:
Principle #35Parameter changes

2Reliability

If correction steps are added to the SWU encoding function to ensure consistent point generation, then interoperability is improved, but computational overhead increases

Engineering Contradiction:
Improveinteroperability reliabilityVSAvoidcomputational complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent applies partial action by implementing correction only where necessary - specifically when transitioning between different coordinate systems. The Legendre symbol calculation and conditional sign adjustment are applied selectively rather than universally, adding minimal computational overhead only when interoperability between different coordinate system implementations is required

Inventive Principle:
Principle #16Partial or excessive action

Solution Approach 2:

The patent uses the Legendre symbol as a lightweight, computationally inexpensive correction mechanism. The Legendre symbol calculation is a simple modular operation that can be performed efficiently, providing a cheap and effective way to correct sign discrepancies without requiring complex additional computational resources or long-term state management

Inventive Principle:
Principle #27Cheap short-living objects (Disposable)

Data Source

PatentEP2527970B1Method for cryptographic encoding on an elliptic curve
Publication Date: 2016.07.06 OBERTHUR TECH SA
  • EP2527970B1 patent drawingFigure 1
  • EP2527970B1 patent drawingFigure 2
  • EP2527970B1 patent drawing

AI summary

The method involves determining a point belonging to an elliptical curve defined on a finite characteristic body, and executing a simplified Shallue-Woestijne-Ulas (SWU) encoding function from an element shared between devices (101, 102) by execution units (111, 112). The function is executed by one of the devices by using a representation system i.e. Jacobean representation system, of coordinates of points, where the system is different from affine representation system of coordinates of points. A correction step is performed for obtaining an equivalent point identical between the devices. Independent claims are also included for the following: (1) a computer program product comprising program code instructions for implementing a method for executing a portion of cryptographic calculation (2) a non-transitory computer-readable storage medium storing a computer program that comprises program code instructions for implementing a method for executing a portion of cryptographic calculation (3) a device comprising units for implementing a method for executing a portion of cryptographic calculation.