Questions tagged [bilinear-pairing]

The tag has no usage guidance.

6 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
45 views

Decisional Diffie-Hellman Assumption on Pairing Friendly Curves

It is known that the Decision Diffie-Hellman (DDH) problem can be easily solved over groups on pairing friendly curves (that is: one can use pairing to tell if $g^x$ and $g^y$ and $g^z$ forms a DH ...
2
votes
0answers
74 views

Cryptographic invariant maps

In [BGK+18] in section 4, Boneh et al. write that: For any choice of ideal classes $\mathfrak{a}_1,\dots,\mathfrak{a}_n,\mathfrak{a}_1',\dots,\mathfrak{a}_n'$ in ${Cl}(\mathcal{O})$, the abelian ...
1
vote
0answers
37 views

Multiplication of pairings vs. exponentiation of the group elements

Assume that we have a pairing as $e:G_1\times G_2\rightarrow G_T$. such that $g_1$ and $g_2$ are the generator of $G_1$ and $G_2$ respectively. In a protocol I have $A=\prod_{i=1}^n e(H(i),pk_i)$ ...
1
vote
0answers
34 views

What's the difference between Optimal ate pairing and R-ate pairing?

I compare the algorithm description of Optimal ate pairing and R-ate pairing, it turns out to me that the formulas are the same. So I'm a little confused, what's the difference between them? or is it ...
0
votes
0answers
20 views

Can I map a message M to a target group of bilinear pairs

Consider a bilinear pairing $e(G_1,G_2)=G_T$, let $G_1,G_2,G_T$ be multiplicative cyclic groups of order p. If I have a message $m$, can I map $m$ to $G_T$, and encrypt $m$ as $m \times G_T$?
0
votes
0answers
78 views

The security level on BN254 and BLS381

Does BLS12-381 still provide 128bits security level? How about BN12-254? 112bits? Is there any references about the security level on pairing?