Weil pairing

E244846

The Weil pairing is a bilinear, alternating, non-degenerate pairing on the torsion points of an elliptic curve, fundamental in number theory and modern cryptography.

All labels observed (2)

Label Occurrences
Weil pairing canonical 1
Weil pairing on abelian varieties 1

How this entity was disambiguated

Statements (48)

Predicate Object
instanceOf alternating form
bilinear form
mathematical concept
non-degenerate pairing
pairing
appearsIn theory of abelian varieties
codomain multiplicative group of the base field extension
roots of unity
definedOn E[n] × E[n] for an elliptic curve E and integer n
definedOver algebraic closure of the base field
domain torsion points of an elliptic curve
field arithmetic geometry
cryptography
elliptic curve theory
number theory
generalizedBy Weil pairing self-linksurface differs
surface form: Weil pairing on abelian varieties
hasApplication attacks on certain elliptic curve cryptosystems via MOV reduction
construction of bilinear maps for cryptographic pairings
introducedIn 20th century
invariantUnder isogenies of elliptic curves up to compatibility
isAlternating true
isBilinear true
isGaloisEquivariant true
isNondegenerate true
isPerfectPairing true
isSkewSymmetric true
namedAfter André Weil
relatedTo Miller algorithm
Tate pairing
elliptic curve isogenies
relates n-torsion subgroup of an elliptic curve to roots of unity
requires choice of integer n relatively prime to the characteristic
satisfiesProperty e_n(P+P',Q)=e_n(P,Q)·e_n(P',Q)
e_n(P,P)=1 for all P in E[n]
e_n(P,Q)=e_n(Q,P)^{-1}
e_n(P,Q+Q')=e_n(P,Q)·e_n(P,Q')
e_n(P,kQ)=e_n(P,Q)^k
e_n(kP,Q)=e_n(P,Q)^k
usedIn cryptographic protocol design
elliptic curve cryptography
identity-based encryption
pairing-based cryptography
tripartite Diffie–Hellman key exchange
usedTo construct pairings with cryptographic hardness assumptions
prove properties of torsion points on elliptic curves
study Galois representations attached to elliptic curves
transfer discrete logarithm problems from elliptic curves to finite fields
valuesIn group of n-th roots of unity

How these facts were elicited

Referenced by (2)

Full triples — surface form annotated when it differs from this entity's canonical label.

André Weil notableConcept Weil pairing
Weil pairing generalizedBy Weil pairing self-linksurface differs
this entity surface form: Weil pairing on abelian varieties