Simple and exact formula for minimum loop length in \(\mathrm{Ate}_{i }\) pairing based on Brezing-Weng curves
The authors derive a formula for the minimum loop of the \(\mathrm{Ate}_i\) pairing based on some class of Brezing-Weng curves, namely Theorem~1 in the paper. Note that the \(\mathrm{Ate}_i\) pairing is one of the several pairings that have appeared in elliptic curve cryptography. The class of curves analyzed under the conditions of Theorem~1 in the paper covers almost all the interesting Brezing-Weng curves in cryptographic terms
scientific article; zbMATH DE number 6150035
scientific article