How can i define the base point of the elliptic curve group element used as the elliptic curve domain parameter over Fp (prime)
-
$\begingroup$ What exactly is your question? How to find a point on a given curve? How to verify the order of said point? How to encode a base point in ASN.1? $\endgroup$– SEJPMOct 14, 2017 at 17:27
-
$\begingroup$ my question is, how to find the right point for generator (base point) on elliptic curve? is there any special provision to find that point? $\endgroup$– Adan KalamsyahOct 15, 2017 at 3:54
-
$\begingroup$ I'm doing research on the application of digital signature using elliptic curve cryptography in block chaining, now I've stage the combination of both.. $\endgroup$– Adan KalamsyahOct 16, 2017 at 4:35
1 Answer
The "base point" is conventional. When using El Gamal or similar algorithms with an elliptic curve, you want to work inside a group with a prime order (either the complete curve has a prime order, or you work in a subgroup of the curve). Within a group of prime order, any element (except the neutral element, which is the "point at infinity" for an elliptic curve) is a generator for the group, so any point will be appropriate. The only requirement here is that all parties agree on the point to use.
It can easily be shown that any base point is as good as any other with regards to resistance to discrete logarithm: if you can solve DL efficiently in base $G$, then you can solve it efficiently in any other base $G'$ by first solving $G'$ with regards to $G$: first, use your efficient DL solving algorithm to compute $k$ such that $G'$ = $kG$; then, given $xG'$, solve it in base $G$ to get $xG' = rG$, then the solution will be $x = r/k \pmod n$ (where $n$ is the group order).
In practice, the "base point" is considered to be part of the curve definition, along with the other curve parameters. For instance, FIPS 186-4 defines the "NIST curves" (in annex D); for each of them, it lists the field modulus ($p$), the curve order ($n$), the curve equation parameters (NIST curves in a prime field use $y^2 = x^3 -3x + b$, so the only equation parameter is $b$), and the two coordinates $G_x$ and $G_y$ of the conventional base point.