Construction of elliptic curves with a suitable embedding degree

摘要

Cryptosystems and signature systems using Weil- Pairing and Tate-Pairing was proposed. These systems require construction of the elliptic curves with a suitable embedding degree. Barreto el. and Morain el. proposed a method, in which a ratio of the size of definition field of elliptic curve to subgroup of elliptic curve order was approximately 2. In this paper, we compare two methods.