Cryptography Stack Exchange is a question and answer site for software developers, mathematicians and others interested in cryptography. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm working with understanding the internals of the Tate Pairing. I was going through an example of the curve $E: y^2 = x^3 + 3x$ over $\mathbb{F_{11}}$. The author is showing the computation of $e(P,Q)$, where $P=(1,9)$ and $Q = \phi (P) = (10,9i)$ using Miller's Algorithm. Through this algorithm, the author chose a point $Q' = (6,6)$ and then computes $S = Q + Q' = (8+7i, 10+6i)$. This is where I'm having an issue, I can't seem to determine how the complex addition of points occurs in elliptic curves, and I'm looking for an explanation in the usage for the Tate pairing.

Paper being referenced : , Section 4.3.1

share|improve this question
He's working over a quadratic extension, and the formulas work exactly the same as over any finite field. – Watson Ladd Jun 1 '13 at 19:40
Watson is correct. Here's the example you mention spelled out in Sage. – Samuel Neves Jun 1 '13 at 20:06

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.