Searle's bar method

In mathematics the Montgomery curve is a form of elliptic curve, different from the usual Weierstrass form, introduced by Peter L. Montgomery in 1987. It is used for certain computations, and in particular in different cryptography applications.

Definition

A Montgomery curve of equation $3y^2=x^3+7x^2+x$

A Montgomery curve over a field $K$ is defined by the equation:

$M_{A,B}$: $B{y}^2=x^3+A{x}^2+x$

for certain $A,B\in K$ and with $B(A^2-4)\ne 0$.

Generally this curve is considered over a finite field $K$ (for example over a finite field of q elements, $K={\mathbb{𝔽}}_q$) with characteristic different from 2 and with $A\in K\mathrm{\setminus }\{-2,2\}$, $B\in K\mathrm{\setminus }\{0\}$; but they are also considered over the rationals with the same restrictions for A and B.

Montgomery arithmetic

It is possible to do some "operations" between the points of an elliptic curve: "adding" two points $P,Q$ consists on finding a third one $R$ such that $R=P+Q$; "doubling" a point consists on computing $[2]P=P+P$ (For more information about operations see The group law) and below.

A point $P=(x,y)$ on the elliptic curve in the Montgomery form $B{y}^2=x^3+A{x}^2+x$ can be represented in Montgomery coordinates $P=(X:Z)$, where $P=(X:Z)$ are projective coordinates and $x=X/Z$ for $Z\ne 0$.

Notice that this kind of representation for a point loses information: indeed, in this case, there is no distinction between the affine points $(x,y)$ and $(x,-y)$ because they are both given by the point $(X:Z)$. However, with this representation it is possible to obtain multiples of points, that is, given $P=(X:Z)$, to compute $[n]P=(X_n:Z_n)$.

Now, considering the two points $P_n=[n]P=(X_n:Z_n)$ and $P_m=[m]P(X_m:Z_m)$: their sum is given by the point $P_{m+n}=P_m+P_n=(X_{m+n}:Z_{m+n})$ whose coordinates are:

$X_{m+n}=Z_{m-n}((X_m-Z_m)(X_n+Z_n)+(X_m+Z_m)(X_n-Z_n){)}^2$

$Z_{m+n}=X_{m-n}((X_m-Z_m)(X_n+Z_n)-(X_m+Z_m)(X_n-Z_n){)}^2$

If $m=n$, then the operation becomes a "doubling"; the coordinates of $[2]P_n=P_n+P_n=P_{2n}=(X_{2n}:Z_{2n})$ are given by the following equations:

$4X_n{Z}_n=(X_n+Z_n{)}^2-(X_n-Z_n{)}^2$

$X_{2n}=(X_n+Z_n{)}^2(X_n-Z_n{)}^2$

$Z_{2n}=(4X_n{Z}_n)((X_n-Z_n{)}^2+((A+2)/4)(4X_n{Z}_n))$

The first operation considered above (addition) has a time-cost of 3M+2S, where M denotes the multiplication between two general elements of the field on which the elliptic curve is defined, while S denotes squaring of a general element of the field.

The second operation (doubling) has a time-cost of 2M+2S+1D, where D denotes the multiplication of a general element by a constant; notice that the constant is $(A+2)/4$, so $A$ can be chosen in order to have a small D.

Algorithm and example

The following algorithm represents a doubling of a point $P_1=(X_1:Z_1)$ on an elliptic curve in the Montgomery form.

It is assumed that $Z_1=1$. The cost of this implementation is 1M + 2S + 1*A + 3add + 1*4. Here M denotes the multiplications required, S indicates the squarings, and a refers to the multiplication by A.

$X{X}_1=X_1^2$

$X_3=(X{X}_1-1{)}^2$

$Z_3=4X_1(X{X}_1+a{X}_1+1)$

Example

Let $P_1=(2,\sqrt{3})$ be a point on the curve $2y^2=x^3-x^2+x$. In coordinates $(X_1:Z_1)$, with $x_1=X_1/Z_1$, $P_1=(2:1)$.

Then:

$X{X}_1=X_1^2=4$

$X_3=(X{X}_1-1{)}^2=9$

$Z_3=4X_1(X{X}_1+a{X}_1+1)=24$

The result is the point $P_3=(X_3:Z_3)=(9:24)$ such that $P_3=2P_1$.

Addition

Given two points $P_1=(x_1,y_1)$, $P_2=(x_2,y_2)$ on the Montgomery curve $M_{A,B}$ in affine coordinates, the point $P_3=P_1+P_2$ represents, geometrically the third point of intersection between $M_{A,B}$ and the line passing through $P_1$ and $P_2$. It is possible to find the coordinates $(x_3,y_3)$ of $P_3$, in the following way:

1) consider a generic line $y=lx+m$ in the affine plane and let it pass through $P_1$ and $P_2$ (impose the condition), in this way, one obtains $l=\frac{y_2-y_1}{x_2-x_1}$ and $m=y_1-(\frac{y_2-y_1}{x_2-x_1})x_1$;

2) intersect the line with the curve $M_{A,B}$, substituting the $y$ variable in the curve equation with $y=lx+m$; the following equation of third degree is obtained:

$x^3+(A-B{l}^2)x^2+(1-2Blm)x-B{m}^2=0$.

As it has been observed before, this equation has three solutions that correspond to the $x$ coordinates of $P_1$, $P_2$ and $P_3$. In particular this equation can be re-written as:

$(x-x_1)(x-x_2)(x-x_3)=0$

3) Comparing the coefficients of the two identical equations given above, in particular the coefficients of the terms of second degree, one gets:

$-x_1-x_2-x_3=A-B{l}^2$.

So, $x_3$ can be written in terms of $x_1$, $y_1$, $x_2$, $y_2$, as:

$x_3=B(\frac{y_2-y_1}{x_2-x_1}{)}^2-A-x_1-x_2$.

4) To find the $y$ coordinate of the point $P_3$ it is sufficient to substitute the value $x_3$ in the line $y=lx+m$. Notice that this will not give the point $P_3$ directly. Indeed, with this method one find the coordinates of the point $R$ such that $R+P_1+P_2=P_{\mathrm{\infty }}$, but if one needs the resulting point of the sum between $P_1$ and $P_2$, then it is necessary to observe that: $R+P_1+P_2=P_{\mathrm{\infty }}$ if and only if $-R=P_1+P_2$. So, given the point $R$, it is necessary to find $-R$, but this can be done easily by changing the sign to the $y$ coordinate of $R$. In other words, it will be necessary to change the sign of the $y$ coordinate obtained by substituting the value $x_3$ in the equation of the line.

Resuming, the coordinates of the point $P_3=(x_3,y_3)$, $P_3=P_1+P_2$ are:

$x_3=\frac{B(y_2-y_1{)}^2}{(x_2-x_1{)}^2}-A-x_1-x_2=\frac{B(x_2{y}_1-x_1{y}_2{)}^2}{x_1{x}_2(x_2-x_1{)}^2}$

$y_3=\frac{(2x_1+x_2+A)(y_2-y_1)}{x_2-x_1}-\frac{B(y_2-y_1{)}^3}{(x_2-x_1{)}^3}-y_1$

Doubling

Given a point $P_1$ on the Montgomery curve $M_{A,B}$, the point $[2]P_1$ represents geometrically the third point of intersection between the curve and the line tangent to $P_1$; so, to find the coordinates of the point $P_3=2P_1$ it is sufficient to follow the same method given in the addition formula; however, in this case, the line y=lx+m has to be tangent to the curve at $P_1$, so, if $M_{A,B}:f(x,y)=0$ with

$f(x,y)=x^3+A{x}^2+x-B{y}^2$,

then the value of l, which represents the slope of the line, is given by:

$l=-\frac{\frac{\partial f}{\partial x}}{\frac{\partial f}{\partial y}}$

by the implicit function theorem.

So $l=\frac{3x_1^2+2A{x}_1+1}{2B{y}_1}$ and the coordinates of the point $P_3$, $P_3=2P_1$ are:

$x_3=B{l}^2-A-x_1-x_1=\frac{B(3x_1^2+2A{x}_1+1{)}^2}{(2B{y}_1{)}^2}-A-x_1-x_1=\frac{(x_1^2-1{)}^2}{4B{y}_1^2}=\frac{(x_1^2-1{)}^2}{4x_1(x_1^2+A{x}_1+1)}$

$y_3=(2x_1+x_1+A)l-B{l}^3-y_1=\frac{(2x_1+x_1+A)(3{x_1}^2+2A{x}_1+1)}{2B{y}_1}-\frac{B(3{x_1}^2+2A{x}_1+1{)}^3}{(2B{y}_1{)}^3}-y_1$.

Equivalence with twisted Edwards curves

Let $K$ be a field with characteristic different from 2.

Let $M_{A,B}$ be an elliptic curve in the Montgomery form:

$M_{A,B}$: $B{v}^2=u^3+A{u}^2+u$

with $A\in K\mathrm{\setminus }\{-2,2\}$, $B\in K\mathrm{\setminus }\{0\}$

and let $E_{a,d}$ be an elliptic curve in the twisted Edwards form:

$E_{a,d}:a{x}^2+y^2=1+d{x}^2{y}^2,$

with $a,d\in K\mathrm{\setminus }\{0\}$, $a\ne d$.

The following theorem shows the birational equivalence between Montgomery curves and twisted Edwards curves:

Theorem (i) Every twisted Edwards curve is birationally equivalent to a Montgomery curve over $K$. In particular, the twisted Edwards curve $E_{a,d}$ is birationally equivalent to the Montgomery curve $M_{A,B}$ where $A=\frac{2(a+d)}{a-d}$, and $B=\frac{4}{a-d}$.

The map:

$\psi :E_{a,d}\to M_{A,B}$

$(x,y)\mapsto (u,v)=(\frac{1+y}{1-y},\frac{1+y}{(1-y)x})$

is a birational equivalence from $E_{a,d}$ to $M_{A,B}$, with inverse:

${\psi }^{-1}$: $M_{A,B}\to E_{a,d}$

$(u,v)\mapsto (x,y)=(\frac{u}{v},\frac{u-1}{u+1}),a=\frac{A+2}{B},d=\frac{A-2}{B}$

Notice that this equivalence between the two curves is not valid everywhere: indeed the map $\psi$ is not defined at the points $v=0$ or $u+1=0$ of the $M_{A,B}$.

Equivalence with Weierstrass curves

Any elliptic curve can be written in Weierstrass form.

So, the elliptic curve in the Montogmery form

$M_{A,B}$: $B{y}^2=x^3+A{x}^2+x$,

can be transformed in the following way: divide each term of the equation for $M_{A,B}$ by $B^3$, and substitute the variables x and y, with $u=\frac{x}{B}$ and $v=\frac{y}{B}$ respectively, to get the equation

$v^2=u^3+\frac{A}{B}{u}^2+\frac{1}{B^2}u$.

To obtain a short Weierstrass form from here, it is sufficient to replace u with the variable $t-\frac{A}{3B}$:

$v^2={(t-\frac{A}{3B})}^3+\frac{A}{B}{(t-\frac{A}{3B})}^2+\frac{1}{B^2}(t-\frac{A}{3B})$;

finally, this gives the equation:

$v^2=t^3+\left(\frac{3-A^2}{3B^2}\right)t+\left(\frac{2A^3-9A}{27B^3}\right)$.

See also

• Curve25519
• Table of costs of operations in elliptic curves, information about the running-time required in a specific case

Notes

43 year old Petroleum Engineer Harry from Deep River, usually spends time with hobbies and interests like renting movies, property developers in singapore new condominium and vehicle racing. Constantly enjoys going to destinations like Camino Real de Tierra Adentro.

References

• One of the biggest reasons investing in a Singapore new launch is an effective things is as a result of it is doable to be lent massive quantities of money at very low interest rates that you should utilize to purchase it. Then, if property values continue to go up, then you'll get a really high return on funding (ROI). Simply make sure you purchase one of the higher properties, reminiscent of the ones at Fernvale the Riverbank or any Singapore landed property Get Earnings by means of Renting
  
  In its statement, the singapore property listing - website link, government claimed that the majority citizens buying their first residence won't be hurt by the new measures. Some concessions can even be prolonged to chose teams of consumers, similar to married couples with a minimum of one Singaporean partner who are purchasing their second property so long as they intend to promote their first residential property. Lower the LTV limit on housing loans granted by monetary establishments regulated by MAS from 70% to 60% for property purchasers who are individuals with a number of outstanding housing loans on the time of the brand new housing purchase. Singapore Property Measures - 30 August 2010 The most popular seek for the number of bedrooms in Singapore is 4, followed by 2 and three. Lush Acres EC @ Sengkang
  
  Discover out more about real estate funding in the area, together with info on international funding incentives and property possession. Many Singaporeans have been investing in property across the causeway in recent years, attracted by comparatively low prices. However, those who need to exit their investments quickly are likely to face significant challenges when trying to sell their property – and could finally be stuck with a property they can't sell. Career improvement programmes, in-house valuation, auctions and administrative help, venture advertising and marketing, skilled talks and traisning are continuously planned for the sales associates to help them obtain better outcomes for his or her shoppers while at Knight Frank Singapore. No change Present Rules
  
  Extending the tax exemption would help. The exemption, which may be as a lot as $2 million per family, covers individuals who negotiate a principal reduction on their existing mortgage, sell their house short (i.e., for lower than the excellent loans), or take part in a foreclosure course of. An extension of theexemption would seem like a common-sense means to assist stabilize the housing market, but the political turmoil around the fiscal-cliff negotiations means widespread sense could not win out. Home Minority Chief Nancy Pelosi (D-Calif.) believes that the mortgage relief provision will be on the table during the grand-cut price talks, in response to communications director Nadeam Elshami. Buying or promoting of blue mild bulbs is unlawful.
  
  A vendor's stamp duty has been launched on industrial property for the primary time, at rates ranging from 5 per cent to 15 per cent. The Authorities might be trying to reassure the market that they aren't in opposition to foreigners and PRs investing in Singapore's property market. They imposed these measures because of extenuating components available in the market." The sale of new dual-key EC models will even be restricted to multi-generational households only. The models have two separate entrances, permitting grandparents, for example, to dwell separately. The vendor's stamp obligation takes effect right this moment and applies to industrial property and plots which might be offered inside three years of the date of buy. JLL named Best Performing Property Brand for second year running
  
  The data offered is for normal info purposes only and isn't supposed to be personalised investment or monetary advice. Motley Fool Singapore contributor Stanley Lim would not personal shares in any corporations talked about. Singapore private home costs increased by 1.eight% within the fourth quarter of 2012, up from 0.6% within the earlier quarter. Resale prices of government-built HDB residences which are usually bought by Singaporeans, elevated by 2.5%, quarter on quarter, the quickest acquire in five quarters. And industrial property, prices are actually double the levels of three years ago. No withholding tax in the event you sell your property. All your local information regarding vital HDB policies, condominium launches, land growth, commercial property and more
  
  There are various methods to go about discovering the precise property. Some local newspapers (together with the Straits Instances ) have categorised property sections and many local property brokers have websites. Now there are some specifics to consider when buying a 'new launch' rental. Intended use of the unit Every sale begins with 10 p.c low cost for finish of season sale; changes to 20 % discount storewide; follows by additional reduction of fiftyand ends with last discount of 70 % or extra. Typically there is even a warehouse sale or transferring out sale with huge mark-down of costs for stock clearance. Deborah Regulation from Expat Realtor shares her property market update, plus prime rental residences and houses at the moment available to lease Esparina EC @ Sengkang
• 20 year-old Real Estate Agent Rusty from Saint-Paul, has hobbies and interests which includes monopoly, property developers in singapore and poker. Will soon undertake a contiki trip that may include going to the Lower Valley of the Omo.
  
  My blog: http://www.primaboinca.com/view_profile.php?userid=5889534
• Template:Cite paper

External links

• Genus-1 curves over large-characteristic fields