Abstract :
Exponentiation may be performed faster than the traditional square and multiply method by iteratively reducing the exponent module numbers which, as exponents themselves, require few multiplications. This mainly includes those with few nonzero bits. For a suitable choice of such divisors, the resulting mixed basis representation of the exponent reduces the expected number of nonsquaring multiplications by over half at the cost of a single extra register. Preprocessing effort depends entirely on the exponent and can be kept down to the work saved in a single exponentiation. Moreover, no precomputed look-up tables are required, so the method is especially applicable where space is at a premium. In particular, it outperforms the instance of the m-ary method which uses the same space. However, for 512-bit exponents, it beats every instance of the m-ary method, achieving well under 635 multiplications on average. Both hardware and software implementations of the RSA crypto-system can benefit from this algorithm
Keywords :
cryptography; digital arithmetic; RSA cryptosystem; division chains; divisors; exponent module numbers; exponentiation; m-ary method; mixed basis representation; precomputed look-up tables; square and multiply method; Arithmetic; Costs; Elliptic curve cryptography; Elliptic curves; Hardware; Organizing; Registers; Software algorithms;