• DocumentCode
    1418689
  • Title

    Exponentiation using division chains

  • Author

    Walter, Colin D.

  • Author_Institution
    Dept. of Comput., Univ. of Manchester Inst. of Sci. & Technol., UK
  • Volume
    47
  • Issue
    7
  • fYear
    1998
  • fDate
    7/1/1998 12:00:00 AM
  • Firstpage
    757
  • Lastpage
    765
  • Abstract
    Exponentiation may be performed faster than the traditional square and multiply method by iteratively reducing the exponent module numbers which, as exponents themselves, require few multiplications. This mainly includes those with few nonzero bits. For a suitable choice of such divisors, the resulting mixed basis representation of the exponent reduces the expected number of nonsquaring multiplications by over half at the cost of a single extra register. Preprocessing effort depends entirely on the exponent and can be kept down to the work saved in a single exponentiation. Moreover, no precomputed look-up tables are required, so the method is especially applicable where space is at a premium. In particular, it outperforms the instance of the m-ary method which uses the same space. However, for 512-bit exponents, it beats every instance of the m-ary method, achieving well under 635 multiplications on average. Both hardware and software implementations of the RSA crypto-system can benefit from this algorithm
  • Keywords
    cryptography; digital arithmetic; RSA cryptosystem; division chains; divisors; exponent module numbers; exponentiation; m-ary method; mixed basis representation; precomputed look-up tables; square and multiply method; Arithmetic; Costs; Elliptic curve cryptography; Elliptic curves; Hardware; Organizing; Registers; Software algorithms;
  • fLanguage
    English
  • Journal_Title
    Computers, IEEE Transactions on
  • Publisher
    ieee
  • ISSN
    0018-9340
  • Type

    jour

  • DOI
    10.1109/12.709375
  • Filename
    709375