<<  >> (p.49)
    Author Topic: Pollard's kangaroo ECDLP solver  (Read 62448 times)
    j2002ba2
    Full Member
    ***
    Offline Offline

    Activity: 212
    Merit: 468


    View Profile
    June 17, 2020, 03:20:20 PM
     #961


    Jumps (the points) are the same, only their private keys are different;

    instead of using, for example, 2543*G as jump, you use (2543*32)*G', where G' = inv(32)*G


    It sounds quite useless to me.

    To get the benefits of kangaroo algorithm, you need to use a specific mean step.

    G' makes all the steps multiple of 32, visiting only 1/32 of the points. This is instant sqrt(32) times slowdown.


    Why you are visiting only 1/32 of the points? You are working in a wider interval, then it is normal to use larger jumps.

    The optimal would be increase the length of the jumps by sqrt(32) instead of 32, but you have to increase it.


    If you change the jumps old DPs are useless.
Page 48
Viewing Page: 49