3
$\begingroup$

Consider a bilinear pairing $e:G_1×G_2→G_T$, and $p^2q^2$ be the order of $G_1$ and $G_2$, where $p$ and $q$ are prime integers.

Suppose that $g_1$ and $g_2$ are generators of $G_1$ and $G_2$ respectively, and $a$ is a random integer. What is the output of $e(g_1^p, g_2^a)$? Is it equal to $(g_t)^{ap}$?

What is the order of the result? Is it equal to $pq^2$?

I know usually in the pairing cryptography the order of groups is set to a prime integer, but, i just want to know what happens if the order is a composite integer $p^2q^2$.

Improve this question
$\endgroup$
7
  • $\begingroup$ Do you know that such a pairing exists? $\endgroup$
    – fkraiem
    Commented Dec 19, 2016 at 12:47
  • $\begingroup$ And while we're at it, you speak of the "embedding degree". I seem to have forgotten what it is; can you remind me? $\endgroup$
    – fkraiem
    Commented Dec 19, 2016 at 12:51
  • $\begingroup$ I do not see a definition of the term "embedding degree" in that link... What I'm trying to get at is, you seem to have only a faint idea of what you are talking about, so I suggest you refer to a serious source, such as for example the book of Hoffstein-Pipher-Silverman. $\endgroup$
    – fkraiem
    Commented Dec 19, 2016 at 14:16
  • $\begingroup$ Ah, found it, it's buried in the middle of a big wall of text.... It says "it’s the degree of the extension of $\mathrm{GF}(q)$ which lets us have a subgroup of $\mathrm{GF}(q^k)^*$ that’s isomorphic to $G_1$." That will do, so what do you not uderstand? $\endgroup$
    – fkraiem
    Commented Dec 19, 2016 at 14:20
  • $\begingroup$ For your second question "what is the order of $e(aQ, pQ)$, here's a hint: what's $q \cdot e(aQ, pQ)$ ? $\endgroup$
    – poncho
    Commented Dec 19, 2016 at 16:25

1 Answer 1

Reset to default
3
$\begingroup$

I find it. The output is $e(g_1^p,g_2^a)=(g_t)^{ap}$. https://eprint.iacr.org/2013/812.pdfenter image description here

Improve this answer
$\endgroup$
1
  • $\begingroup$ You should be able to accept your own answer by now. Thanks for reporting back! $\endgroup$
    – Maarten Bodewes ♦
    Commented Feb 18, 2017 at 14:16

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.