High-Speed Parallel Software Implementation of the $η_T$ Pairing

In this paper we describe a high-speed software implementation of the ηT pairing over binary supersingular curves at the 128-bit security level. This implementation explores two types of parallelism found in modern multi-core platforms: vector instructions and multiprocessing. We rst introduce novel techniques for implementing arithmetic in binary elds with vector instructions. We then devise a new parallelization of Miller’s Algorithm to compute bilinear pairings. This parallelization provides an algorithm for pairing computation without increasing storage costs signicantly. The combination of these acceleration techniques produce serial timings at least 24% faster and parallel timings 66% faster than the best previous result in an Intel Core platform, establishing a new state-of-the-art implementation of this pairing instantiation in this platform.