Analysis of the width-[Formula: see text] non-adjacent form in conjunction with hyperelliptic curve cryptography and with lattices

Theor Comput Sci. 2013 Jun 17;491(100):47-70. doi: 10.1016/j.tcs.2013.04.006.

Abstract

In this work the number of occurrences of a fixed non-zero digit in the width-[Formula: see text] non-adjacent forms of all elements of a lattice in some region (e.g. a ball) is analysed. As bases, expanding endomorphisms with eigenvalues of the same absolute value are allowed. Applications of the main result are on numeral systems with an algebraic integer as base. Those come from efficient scalar multiplication methods (Frobenius-and-add methods) in hyperelliptic curves cryptography, and the result is needed for analysing the running time of such algorithms. The counting result itself is an asymptotic formula, where its main term coincides with the full block length analysis. In its second order term a periodic fluctuation is exhibited. The proof follows Delange's method.

Keywords: Frobenius endomorphism; Hyperelliptic curve cryptography; Koblitz curves; Lattices; Numeral systems; Redundant digit sets; Scalar multiplication; Sum of digits; Width-[Formula: see text] non-adjacent forms; [Formula: see text]-adic expansions.