elliptic curves and the state of survaillence
play

Elliptic Curves and the State of Survaillence Aleksander Horawa - PowerPoint PPT Presentation

Jan 23, 2024 •16 likes •536 views

Elliptic Curves and the State of Survaillence Aleksander Horawa Imperial College London February 21, 2015 Aleksander Horawa Elliptic Curves and the State of Survaillence Reference: Thomas C. Hales, The NSA Back Door to NIST , Notices of the

  1. Elliptic Curves and the State of Survaillence Aleksander Horawa Imperial College London February 21, 2015 Aleksander Horawa Elliptic Curves and the State of Survaillence

  2. Reference: Thomas C. Hales, The NSA Back Door to NIST , Notices of the AMS. Aleksander Horawa Elliptic Curves and the State of Survaillence

  3. image credits: https://wordtothewise.com/ Aleksander Horawa Elliptic Curves and the State of Survaillence

  4. image credits: https://wordtothewise.com/ Aleksander Horawa Elliptic Curves and the State of Survaillence

  5. image credits: https://wordtothewise.com/ Aleksander Horawa Elliptic Curves and the State of Survaillence

  6. image credits: https://wordtothewise.com/ Aleksander Horawa Elliptic Curves and the State of Survaillence

  7. image credits: https://wordtothewise.com/ Aleksander Horawa Elliptic Curves and the State of Survaillence

  8. image credits: https://wordtothewise.com/ Aleksander Horawa Elliptic Curves and the State of Survaillence

  9. One-time pad Alice and Bob both have access to the same (secret) list of random numbers. 5 , 23 , 12 , 15 , 11 , 9 , 3 , 4 , 6 , 24 , 9 , 3 , 6 , 5 , 15 , 7 , 24 , . . . Aleksander Horawa Elliptic Curves and the State of Survaillence

  10. One-time pad Alice and Bob both have access to the same (secret) list of random numbers. 5 , 23 , 12 , 15 , 11 , 9 , 3 , 4 , 6 , 24 , 9 , 3 , 6 , 5 , 15 , 7 , 24 , . . . Alice wants to say ”Hello” to Bob. Aleksander Horawa Elliptic Curves and the State of Survaillence

  11. One-time pad Alice and Bob both have access to the same (secret) list of random numbers. 5 , 23 , 12 , 15 , 11 , 9 , 3 , 4 , 6 , 24 , 9 , 3 , 6 , 5 , 15 , 7 , 24 , . . . Alice wants to say ”Hello” to Bob. Alice h e l l o 7 4 11 11 14 Aleksander Horawa Elliptic Curves and the State of Survaillence

  12. One-time pad Alice and Bob both have access to the same (secret) list of random numbers. 5 , 23 , 12 , 15 , 11 , 9 , 3 , 4 , 6 , 24 , 9 , 3 , 6 , 5 , 15 , 7 , 24 , . . . Alice wants to say ”Hello” to Bob. Alice h e l l o 7 4 11 11 14 + 5 23 12 15 11 Aleksander Horawa Elliptic Curves and the State of Survaillence

  13. One-time pad Alice and Bob both have access to the same (secret) list of random numbers. 5 , 23 , 12 , 15 , 11 , 9 , 3 , 4 , 6 , 24 , 9 , 3 , 6 , 5 , 15 , 7 , 24 , . . . Alice wants to say ”Hello” to Bob. Alice h e l l o 7 4 11 11 14 + 5 23 12 15 11 12 27 23 26 25 Aleksander Horawa Elliptic Curves and the State of Survaillence

  14. One-time pad Alice and Bob both have access to the same (secret) list of random numbers. 5 , 23 , 12 , 15 , 11 , 9 , 3 , 4 , 6 , 24 , 9 , 3 , 6 , 5 , 15 , 7 , 24 , . . . Alice wants to say ”Hello” to Bob. Alice h e l l o 7 4 11 11 14 + 5 23 12 15 11 12 27 23 26 25 (26) 12 1 23 0 25 Aleksander Horawa Elliptic Curves and the State of Survaillence

  15. One-time pad Alice and Bob both have access to the same (secret) list of random numbers. 5 , 23 , 12 , 15 , 11 , 9 , 3 , 4 , 6 , 24 , 9 , 3 , 6 , 5 , 15 , 7 , 24 , . . . Alice wants to say ”Hello” to Bob. Alice h e l l o 7 4 11 11 14 + 5 23 12 15 11 12 27 23 26 25 (26) 12 1 23 0 25 m b x a z Aleksander Horawa Elliptic Curves and the State of Survaillence

  16. One-time pad Alice and Bob both have access to the same (secret) list of random numbers. 5 , 23 , 12 , 15 , 11 , 9 , 3 , 4 , 6 , 24 , 9 , 3 , 6 , 5 , 15 , 7 , 24 , . . . Alice wants to say ”Hello” to Bob. Alice Bob h e l l o m b x a z 7 4 11 11 14 + 5 23 12 15 11 12 27 23 26 25 (26) 12 1 23 0 25 m b x a z Aleksander Horawa Elliptic Curves and the State of Survaillence

  17. One-time pad Alice and Bob both have access to the same (secret) list of random numbers. 5 , 23 , 12 , 15 , 11 , 9 , 3 , 4 , 6 , 24 , 9 , 3 , 6 , 5 , 15 , 7 , 24 , . . . Alice wants to say ”Hello” to Bob. Alice Bob h e l l o m b x a z 7 4 11 11 14 12 1 23 0 25 + 5 23 12 15 11 12 27 23 26 25 (26) 12 1 23 0 25 m b x a z Aleksander Horawa Elliptic Curves and the State of Survaillence

  18. One-time pad Alice and Bob both have access to the same (secret) list of random numbers. 5 , 23 , 12 , 15 , 11 , 9 , 3 , 4 , 6 , 24 , 9 , 3 , 6 , 5 , 15 , 7 , 24 , . . . Alice wants to say ”Hello” to Bob. Alice Bob h e l l o m b x a z 7 4 11 11 14 12 1 23 0 25 + 5 23 12 15 11 − 5 23 12 15 11 12 27 23 26 25 (26) 12 1 23 0 25 m b x a z Aleksander Horawa Elliptic Curves and the State of Survaillence

  19. One-time pad Alice and Bob both have access to the same (secret) list of random numbers. 5 , 23 , 12 , 15 , 11 , 9 , 3 , 4 , 6 , 24 , 9 , 3 , 6 , 5 , 15 , 7 , 24 , . . . Alice wants to say ”Hello” to Bob. Alice Bob h e l l o m b x a z 7 4 11 11 14 12 1 23 0 25 + 5 23 12 15 11 − 5 23 12 15 11 12 27 23 26 25 7 -22 11 - 15 14 (26) 12 1 23 0 25 m b x a z Aleksander Horawa Elliptic Curves and the State of Survaillence

  20. One-time pad Alice and Bob both have access to the same (secret) list of random numbers. 5 , 23 , 12 , 15 , 11 , 9 , 3 , 4 , 6 , 24 , 9 , 3 , 6 , 5 , 15 , 7 , 24 , . . . Alice wants to say ”Hello” to Bob. Alice Bob h e l l o m b x a z 7 4 11 11 14 12 1 23 0 25 + 5 23 12 15 11 − 5 23 12 15 11 12 27 23 26 25 7 -22 11 - 15 14 (26) 12 1 23 0 25 (26) 7 4 11 11 14 m b x a z Aleksander Horawa Elliptic Curves and the State of Survaillence

  21. One-time pad Alice and Bob both have access to the same (secret) list of random numbers. 5 , 23 , 12 , 15 , 11 , 9 , 3 , 4 , 6 , 24 , 9 , 3 , 6 , 5 , 15 , 7 , 24 , . . . Alice wants to say ”Hello” to Bob. Alice Bob h e l l o m b x a z 7 4 11 11 14 12 1 23 0 25 + 5 23 12 15 11 − 5 23 12 15 11 12 27 23 26 25 7 -22 11 - 15 14 (26) 12 1 23 0 25 (26) 7 4 11 11 14 m b x a z h e l l o Aleksander Horawa Elliptic Curves and the State of Survaillence

  22. Random numbers Problem. Need random numbers! How can we generate them? Aleksander Horawa Elliptic Curves and the State of Survaillence

  23. Random numbers Problem. Need random numbers! How can we generate them? Truly random numbers can only come from a physical process. Aleksander Horawa Elliptic Curves and the State of Survaillence

  24. Random numbers Problem. Need random numbers! How can we generate them? Truly random numbers can only come from a physical process. We can generate numbers that appear random from a recipe using a computational device. These are called pseudo-random numbers . Aleksander Horawa Elliptic Curves and the State of Survaillence

  25. Random numbers Problem. Need random numbers! How can we generate them? Truly random numbers can only come from a physical process. We can generate numbers that appear random from a recipe using a computational device. These are called pseudo-random numbers . One method comes from the theory of elliptic curves, which are recently very common in cryptography. Aleksander Horawa Elliptic Curves and the State of Survaillence

  26. Elliptic curves Google Chrome: Key exchange: ECDHE RSA EC = Elliptic Curve Aleksander Horawa Elliptic Curves and the State of Survaillence

  27. Elliptic curves Elliptic curves are a special kind of cubic curves on the plane. Definition An elliptic curve over R is the set of solution ( x , y ) ∈ R 2 of y 2 = x 3 + ax + b for a , b ∈ R such that 27 b 2 + 4 a 3 � = 0, together with a point O called the point at infinity . Aleksander Horawa Elliptic Curves and the State of Survaillence

  28. Elliptic curves Examples y 2 = x 3 − x + 1 y 2 = x 3 − x 3 3 2 2 1 1 − 2 − 1 1 2 − 2 − 1 1 2 − 1 − 1 − 2 − 2 − 3 − 3 Aleksander Horawa Elliptic Curves and the State of Survaillence

  29. Addition on elliptic curves Why are they so useful? You can define addition on them! P Q P + Q Aleksander Horawa Elliptic Curves and the State of Survaillence

  30. Addition on elliptic curves Why are they so useful? You can define addition on them! 2 P P Aleksander Horawa Elliptic Curves and the State of Survaillence

  31. Addition on elliptic curves Why are they so useful? You can define addition on them! P Aleksander Horawa Elliptic Curves and the State of Survaillence

  32. Addition on elliptic curves Problem. The definition is geometric. We need formulas! y = y 2 − y 1 x 2 − x 1 ( x − x 1 ) + y 1 P = ( x 1 , y 1 ) Q = ( x 2 , y 2 ) P + Q = ( x 3 , y 3 ) Aleksander Horawa Elliptic Curves and the State of Survaillence

  33. Addition on elliptic curves Problem. The definition is geometric. We need formulas! y = y 2 − y 1 x 2 − x 1 ( x − x 1 ) + y 1 P = ( x 1 , y 1 ) Q = ( x 2 , y 2 ) � � 2 y 2 − y 1 x 3 = − x 1 − x 2 x 2 − x 1 P + Q = ( x 3 , y 3 ) � � y 2 − y 1 y 3 = − y 1 + ( x 1 − x 3 ) x 2 − x 1 Aleksander Horawa Elliptic Curves and the State of Survaillence

  34. Elliptic curves Computers are good with finite objects. Aleksander Horawa Elliptic Curves and the State of Survaillence

Recommend

Rational Points on Modular Elliptic Curves I. Elliptic Curves Hedrick Lecture Series MAA

Rational Points on Modular Elliptic Curves I. Elliptic Curves Hedrick Lecture Series MAA

Rational Points on Modular Elliptic Curves I. Elliptic Curves Hedrick Lecture Series MAA MathFest Boulder, Colorado August 2003 http://www.math.mcgill.ca/darmon /slides/slides.html Elliptic Curves Definition : An elliptic curve over the

494 views • 26 slides
Weierstra Equations 2 d 4 16 ( 1 t 2 / 4 ) Singular points

Weierstra Equations 2 d 4 16 ( 1 t 2 / 4 ) Singular points

Elliptic curves over F q Introduction History length of ellipses why Elliptic curves? Fields Weierstra Equations Singular points The Discriminant E LLIPTIC CURVES OVER FINITE FIELDS Elliptic curves / F 2 Elliptic curves / F 3 The sum of

660 views • 32 slides
Forms of elliptic curves Wouter Castryck Forms of elliptic curves First definitions Well-known

Forms of elliptic curves Wouter Castryck Forms of elliptic curves First definitions Well-known

Well-known forms of elliptic curves Toric forms of elliptic curves Forms of elliptic curves Wouter Castryck Forms of elliptic curves First definitions Well-known forms of elliptic curves Projective coordinates Toric forms of elliptic curves

478 views • 46 slides
Elliptic Curves in Sage William Stein Sage Project Functionality William Stein Demo

Elliptic Curves in Sage William Stein Sage Project Functionality William Stein Demo

Elliptic Curves in Sage Elliptic Curves in Sage William Stein Sage Project Functionality William Stein Demo Questions? October 19 at ECC 2010 Lowest (known) conductor elliptic curves of ranks 0,1,2,3,4 Abstract Elliptic Curves in Sage

628 views • 14 slides
Lecture 11: Elliptic curves and their moduli May 26, 2020 1 / 9 Elliptic curves and complex

Lecture 11: Elliptic curves and their moduli May 26, 2020 1 / 9 Elliptic curves and complex

Lecture 11: Elliptic curves and their moduli May 26, 2020 1 / 9 Elliptic curves and complex tori E a , b : y 2 x 3 ` ax ` b , 4 a 3 ` 27 b 2 0 4 a 3 j p E a , b q 1728 4 a 3 ` 27 b 2 Theorem. The map z r p z q : 1 2 1 p

646 views • 9 slides
Isogenies and endomorphism rings of elliptic curves ECC Summer School Damien Robert Microsoft

Isogenies and endomorphism rings of elliptic curves ECC Summer School Damien Robert Microsoft

Isogenies and endomorphism rings of elliptic curves ECC Summer School Damien Robert Microsoft Research 15 / 09 / 2011 (Nancy) 2 / 66 Outline 1 Isogenies on elliptic curves 2 Endomorphisms 3 Supersingular elliptic curves 4 Abelian varieties

1.84k views • 79 slides
The Elliptic Curves Discrete Logarithm Problem and an implementation of parallelized Pollards

The Elliptic Curves Discrete Logarithm Problem and an implementation of parallelized Pollards

What is an elliptic curve? Elliptic Curves in Cryptography. ECDLP resolution. -Pollard and CUDA. Conclusions The Elliptic Curves Discrete Logarithm Problem and an implementation of parallelized Pollards algorithm for ECDLP Alberto

1.52k views • 103 slides
Deterministic Generation of Elliptic Curves (a.k.a. "NUMS" Curves) Motivation

Deterministic Generation of Elliptic Curves (a.k.a. "NUMS" Curves) Motivation

Deterministic Generation of Elliptic Curves (a.k.a. "NUMS" Curves) Motivation Reduced customer confidence in NIST-standardized curves (FIPS 186-3) Industry moving to Perfect Forward Secrecy (PFS) ciphersuites (e.g. ECDHE)

306 views • 11 slides
Faltings Heights of CM Elliptic Curves Tyler Genao Florida Atlantic University In collaboration

Faltings Heights of CM Elliptic Curves Tyler Genao Florida Atlantic University In collaboration

Faltings Heights of CM Elliptic Curves Tyler Genao Florida Atlantic University In collaboration with Adrian Barquero-Sanchez, Lindsay Cadwallader, Olivia Cannon, Riad Masri Tyler Genao Faltings Heights of CM Elliptic Curves Elliptic Curves

571 views • 41 slides
Elliptic Curves II Reinier Br oker Fields Institute & University of Calgary Summer School

Elliptic Curves II Reinier Br oker Fields Institute & University of Calgary Summer School

Elliptic Curves II Reinier Br oker Fields Institute & University of Calgary Summer School before ECC September 2006 Elliptic curves An elliptic curve E over a field K is given by a Weierstra equation Y 2 + h ( X ) Y = f ( X ) with h, f

416 views • 13 slides
Finding Cryptographically Strong Elliptic Curves An Introduction Hamish Ivey-Law

Finding Cryptographically Strong Elliptic Curves An Introduction Hamish Ivey-Law

Outline Elliptic curve cryptography Secure domain parameters Case study: finding secure Edwards curves Finding Cryptographically Strong Elliptic Curves An Introduction Hamish Ivey-Law hlaw@iml.univ-mrs.fr Institute de Math ematiques de

662 views • 41 slides
The symplectic type of congruences between elliptic curves John Cremona University of Warwick

The symplectic type of congruences between elliptic curves John Cremona University of Warwick

The symplectic type of congruences between elliptic curves John Cremona University of Warwick joint work with Nuno Freitas (Warwick) AGC 2 T Luminy, 10 June 2019 Overview 1. Elliptic curves, mod p Galois representations, Weil pairing. 2.

954 views • 70 slides
Lecture 2 Elliptic curves over finite fields The Group structure Reminder from Monday the j

Lecture 2 Elliptic curves over finite fields The Group structure Reminder from Monday the j

Elliptic curves over F q F. Pappalardi Lecture 2 Elliptic curves over finite fields The Group structure Reminder from Monday the j -invariant Research School: Algebraic curves over finite fields Points of finite order

581 views • 29 slides
Recent Advances in Parallel Implementations of Scalar Multiplication over Binary Elliptic Curves

Recent Advances in Parallel Implementations of Scalar Multiplication over Binary Elliptic Curves

Recent Advances in Parallel Implementations of Scalar Multiplication over Binary Elliptic Curves C. Negre and J.M. Robert april 8, 2015 1 / 39 Outline Overview of elliptic curve cryptography 1 Implementation of F 2 m arithmetic 2 Elliptic

781 views • 75 slides
Elliptic Curves over the Rational Mordells Theorem Numbers Q An elliptic curve is a

Elliptic Curves over the Rational Mordells Theorem Numbers Q An elliptic curve is a

Elliptic Curves over the Rational Mordells Theorem Numbers Q An elliptic curve is a nonsingular plane cu- Theorem (Mordell). The group E ( Q ) of rational points on an bic curve with a rational point (possibly at elliptic curve is a

402 views • 7 slides
Q ( 5) Elliptic Curves over Q ( 5) Stein William Stein, University of Washington This is

Q ( 5) Elliptic Curves over Q ( 5) Stein William Stein, University of Washington This is

Curves Over Q ( 5) Elliptic Curves over Q ( 5) Stein William Stein, University of Washington This is part of the NSF-funded AIM FRG project on Databases of L -functions. This talk had much valuable input from Noam Elkies, John Voight,

567 views • 40 slides
Faster formulas for elliptic curves Hseyin H sl hisil.huseyin@gmail.com

Faster formulas for elliptic curves Hseyin H sl hisil.huseyin@gmail.com

Faster formulas for elliptic curves Hseyin H sl hisil.huseyin@gmail.com www.huseyinhisil.net ECC2010, Redmond Hseyin H sl () October 19, 2010 1 / 36 Faster formulas for elliptic curves (A roadmap for formula-hunters)

825 views • 55 slides
Stein Elliptic Curves over Q ( 5) William Stein, University of Washington (This is part of

Stein Elliptic Curves over Q ( 5) William Stein, University of Washington (This is part of

Curves Over Q ( 5) Stein Elliptic Curves over Q ( 5) William Stein, University of Washington (This is part of the NSF-funded AIM FRG project on Databases of L -functions) February 2011 Curves Over Q ( 5) Stein 1. Finding

536 views • 34 slides
Elliptic gamma functions, gerbes and triptic curves Giovanni Felder, ETH Zurich Paris, 18

Elliptic gamma functions, gerbes and triptic curves Giovanni Felder, ETH Zurich Paris, 18

Elliptic gamma functions, gerbes and triptic curves Giovanni Felder, ETH Zurich Paris, 18 January 2007 1 Table of contents 0. Introduction 1. Two periods: Jacobis infinite products, elliptic curves, SL 2 ( Z ) 2. Three periods:

510 views • 18 slides
On the discrete logarithm problem in elliptic curves Claus Diem University of Leipzig On the

On the discrete logarithm problem in elliptic curves Claus Diem University of Leipzig On the

On the discrete logarithm problem in elliptic curves Claus Diem University of Leipzig On the discrete logarithm problem in elliptic curves p.1/37 Some history At ECC 2004 in Bochum, Pierrick Gaudry presented an index calculus algorithm

897 views • 67 slides
Elliptic Curves over Q Peter Birkner Technische Universiteit Eindhoven DIAMANT Summer School on

Elliptic Curves over Q Peter Birkner Technische Universiteit Eindhoven DIAMANT Summer School on

Elliptic Curves over Q Peter Birkner Technische Universiteit Eindhoven DIAMANT Summer School on Elliptic and Hyperelliptic Curve Cryptography 16 September 2008 What is an elliptic curve? (1) An elliptic curve E over a field k in Weierstra

298 views • 25 slides
ELLIPTIC CURVES By Jessica and Sushi WHAT ARE ELLIPTIC CURVES?! ADDING POINTS! Adding points

ELLIPTIC CURVES By Jessica and Sushi WHAT ARE ELLIPTIC CURVES?! ADDING POINTS! Adding points

ELLIPTIC CURVES By Jessica and Sushi WHAT ARE ELLIPTIC CURVES?! ADDING POINTS! Adding points is not the same addition as 1+1=2. The addition of points is the production of a third point using two already known points Properties of

503 views • 22 slides
The group structure of rational points of elliptic curves over a finite field 2015/09 ECC

The group structure of rational points of elliptic curves over a finite field 2015/09 ECC

The group structure of rational points of elliptic curves over a finite field 2015/09 ECC 2015, Bordeaux, France Damien Robert quipe LFANT, Inria Bordeaux Sud-Ouest Institut de Mathmatiques de Bordeaux September 2015 Elliptic curves

1.11k views • 68 slides
Contents Elliptic curves with complex multiplication: history and computations I. History. F .

Contents Elliptic curves with complex multiplication: history and computations I. History. F .

Contents Elliptic curves with complex multiplication: history and computations I. History. F . Morain II. A review of classical theory. Laboratoire dInformatique de lcole polytechnique III. Using CM. CNRS IV. Modular curves and

235 views • 11 slides

More recommend