Cited by 5,634Cryptography and Residue ArithmeticCryptography and Data SecurityAlgebraic Geometry and Number Theory

Elliptic curve cryptosystems

Open access
Koblitz, Neal·1987·Mathematics of Computation

Abstract

We discuss analogs based on elliptic curves over finite fields of public key cryptosystems which use the multiplicative group of a finite field. These elliptic curve cryptosystems may be more secure, because the analog of the discrete logarithm problem on elliptic curves is likely to be harder than the classical discrete logarithm problem, especially over GF ( 2 n ) . We discuss the question of primitive points on an elliptic curve modulo p , and give a theorem on nonsmoothness of the order of the cyclic subgroup generated by a global point.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1090/s0025-5718-1987-0866109-5

Cites

18 of 18 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

  • The security of SAE lies in the intractable nature of the dot product operation in discrete logarithmic computation; knowing EA and PE makes it computationally intractable to find mA.

    “The security of this protocol lies in the intractable nature of the dot product operation in discrete logarithmic computation.By knowing E A and PE, it is computationally intractable to find m A [33].”

    From A Comprehensive Attack Flow Model and Security Analysis for Wi-Fi and WPA3 (2018) · cites this paper as [33]

    The cryptosystems passage (indexed as Abstract; page unavailable) defines the elliptic-curve discrete logarithm problem as finding x from P and Q = xP, and says breaking the systems discussed requires solving it. This supports the claimed difficulty of recovering a secret scalar from public points. The paper does not address SAE or its variables EA, PE and mA, and describes scalar multiplication rather than a dot product. (LLM, conf=0.86)

    Experimental — accuracy not yet measured

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 3

  1. H. W. LENSTRA, Jr., "Factoring integers with elliptic curves." (Preprint.)
  2. A. M. Odlyzko, "Discrete logarithms and their cryptographic significance," Advances in Cryptol- ogy: Proceedings of Eurocrypt 84, Springer-Verlag, New York, 1985, pp. 224-314.
  3. P. K. S. Wah&M. Z. Wang, Realization and Application of the Massey-Omura Lock, Proc. Internat. Zurich Seminar, March 6-8, 1984, pp. 175-182.

Cited by

Sorted by citations

Authors
Koblitz, N.
Corresponding author
Koblitz, Neal
Venue
Mathematics of Computation
Published
1987
Volume
48
Issue
177
Pages
203-209
ISSN
  • 0025-5718 (ISSN-L)
  • 1088-6842
OpenAlex
W2036378739
Cited by
5,634
References
18
Citations by year
2026: 165 · 2025: 242 · 2024: 245 · 2023: 222 · 2022: 228 · 2021: 277 · 2020: 291 · 2019: 244 · 2018: 242 · 2017: 263 · 2016: 239 · 2015: 234 · 2014: 260 · 2013: 256 · 2012: 258
FWCI
14.25
Type
journal article
Language
en
Open access
Locations
Mathematics of Computation (publishedVersion)
Topics
  • Physical Sciences › Computer Science › Information Systems › Cryptography and Residue Arithmetic
  • Physical Sciences › Computer Science › Artificial Intelligence › Cryptography and Data Security
  • Physical Sciences › Mathematics › Geometry and Topology › Algebraic Geometry and Number Theory
Keywords
elliptic curve cryptography, public-key cryptography, elliptic curves over finite fields, discrete logarithm problem

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review