[Updated on Apr. 18] Integration of CiNii Articles into CiNii Research

Heuristic counting of Kachisa-Schaefer-Scott curves


Estimating the number of pairing-friendly elliptic curves is important for obtaining such a curve with a suitable security level and high efficiency. For 128-bit security level, M. Naehrig and J. Boxall estimated the number of Barreto-Naehrig (BN) curves. For future use, we extend their results to higher security levels, that is, to count Kachisa-Schaefer-Scott (KSS) curves with 192- and 224-bit security levels. Our efficient counting is based on a number-theoretic conjecture, called the Bateman-Horn conjecture. We verify the validity of using the conjecture and confirm that an enough amount of KSS curves can be obtained for practical use.


  • JSIAM Letters

    JSIAM Letters 6 (0), 73-76, 2014

    The Japan Society for Industrial and Applied Mathematics


See more


Report a problem

Back to top