|
In mathematics, the Jacobi curve is a representation of an elliptic curve different from the usual one (Weierstrass equation). Sometimes it is used in cryptography instead of the Weierstrass form because it can provide a defence against simple and differential power analysis style (SPA) attacks; it is possible, indeed, to use the general addition formula also for doubling a point on an elliptic curve of this form: in this way the two operations become indistinguishable from some side-channel information.〔Olivier Billet, ''The Jacobi Model of an Elliptic Curve and Side-Channel Analysis''〕 The Jacobi curve offers also faster arithmetic compared to the Weierstrass curve. The Jacobi curve can be of two types: the Jacobi intersection, that is given by an intersection of two surfaces, and the Jacobi quartic. ==Elliptic Curves: Basics== Given an elliptic curve, it is possible to do some "operations" between its points: for example one can add two points ''P'' and ''Q'' obtaining the point ''P'' + ''Q'' that belongs to the curve ; given a point ''P'' on the elliptic curve, it is possible to "double" P, that means find ()''P'' = ''P'' + ''P'' (the square brackets are used to indicate ''()P'', the point ''P'' added ''n'' times), and also find the negation of ''P'', that means find –''P''. In this way, the points of an elliptic curve forms a group. Note that the identity element of the group operation is not a point on the affine plane, it only appears in the projective coordinates: then ''O'' = (0: 1: 0) is the "point at infinity", that is the neutral element in the group law. Adding and doubling formulas are useful also to compute ''()P'', the ''n''-th multiple of a point ''P'' on an elliptic curve: this operation is considered the most in elliptic curve cryptography. An elliptic curve ''E'', over a field ''K'' can be put in the Weierstrass form ''y''2 = ''x''3 + ''ax'' + ''b'', with ''a'', ''b'' in ''K''. What will be of importance later are point of order 2, that is ''P'' on ''E'' such that ()''P'' = ''O''. If ''P'' = (''p'', 0) is a point on ''E'', then it has order 2; more generally the points of order 2 correspond to the roots of the polynomial ''f(x)'' = ''x''3 + ''ax'' + ''b''. From now on, we will use ''Ea,b'' to denote the elliptic curve with Weierstrass form ''y''2 = ''x''3 + ''ax'' + ''b''. If ''Ea,b'' is such that the cubic polynomial ''x''3 + ''ax'' + ''b'' has three distinct roots in ''K'' we can write ''Ea,b'' in the Legendre normal form: :''Ea,b:'' ''y''2 = ''x(x + 1)(x + j)'' In this case we have three points of order two: (0, 0), (–1, 0), (–''j'', 0). In this case we use the notation ''E()''. Note that ''j'' can be expressed in terms of ''a'', ''b''. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Jacobian curve」の詳細全文を読む スポンサード リンク
|