Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a way to derive the formulas for point addition and multiplication on elliptic curves in Jacobian format by yourself? How could I have derived these formulas by myself?

share|improve this question

I haven't worked through all the (boring) details but it should be fairly easy. Just start with the normal affine addition and doubling formulae but when it comes to the stage where you do any division, don't bother and just keep track of the numerator/denominator separately. The whole point of Jacobian and other projective representations is that you don't do any division until you HAVE to. The disadvantage is that one point has many different projective representations.

The $Z^2$ or $Z^3$ aspect is just shuffling multiplications around to make doubling slightly faster versus addition or vice-versa or to do with being able to add an affine point to a projective point more quickly. It tends not to matter too much. If you want faster calculations you should be choosing perhaps an Edwards curve representation and/or maths over an appropriately fast extension field.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.