4
$\begingroup$

Probably this is a silly question but an anomalous curves and ordinary curves are the same things?

$\endgroup$

1 Answer 1

2
$\begingroup$

Let $E$ be an elliptic curve defined over a field $K$. Let $n$ be a positive integer.

$$E[n] = \{P \in E(\overline{K}) \,|\, [n]P = \infty\}$$

Where $\overline{K}$ is the algebraic closure of $K$ and $E[n]$ include the point with coordinate $\overline{K}$, not just from $K$. The above is the set of $n$ torsion points on the curve, namely the points of finite order $n$. In Elliptic curves over a finite field, all points are torsion points.

  • An elliptic curve $E$ in characteristic $p$ is called ordinary curves if $ E[p] \backsimeq \mathbf{Z}/p\mathbf{Z}$
  • An elliptic curve $E$ in characteristic $p$ is called supersingular curves if $ E[p] \backsimeq 0$, and we know that those curves are not secure.
  • An elliptic curves $E$ over $F_q$ with $\#E(\mathbf{F}_q ) = q$ are called anomalous curves. This is suggested to use against the MOV attack. Unfortunately, the discrete log problem for group $E(\mathbf{F}_q )$ can be solved quickly.

Ref: A good textbook: Elliptic Curves Number Theory and Cryptography, Second Edition, by Lawrence Washington.

$\endgroup$
2
  • $\begingroup$ the link link.springer.com/referenceworkentry/10.1007/… says that "Koblitz curves, also known as anomalous binary curves". Are they the same anomalous curves as you describe? it feels like Koblitz curves are anomalous in different meaning. $\endgroup$
    – Alex
    Commented Aug 18 at 22:48
  • $\begingroup$ @Alex, make the distinction that those Koblitz Curves are defined over $F_2$ and called anomalous binary curves. $\endgroup$
    – kelalaka
    Commented Aug 21 at 21:49

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.