Score:1

"Add" points that are not on the same elliptic curve?

in flag

Assume elliptic curve in Weierstrass form.

$y^2 = x^3 + a x + b$ where $x,y,a,b \in F$

I noticed the point addition formula does not involve parameters $a,b$. Furthermore, one can always solve for $a,b$ given two distinct points.

Thus one can "add" 3 or more distinct points, as long as their coordinates are on $F$, without having them on the same curve. More formally, let $O$ be point of infinity, the set $F \times F \cup O$ is almost closed under point addition operation for short Weierstrass curve. (Almost closed since one has to "add" distinct points)

I did a quick check that associative law for groups no longer holds. What would be some interesting properties for the above setup?

kelalaka avatar
in flag
For $b$ yes, for $a$ [no](https://crypto.stackexchange.com/a/66296/18298) ($a$ needed for doubling). Could you support your claims? given two points to find $a$ and $b$ is [here](https://crypto.stackexchange.com/questions/97811/find-elliptic-curve-parameters-a-and-b-given-two-points-on-the-curve/97816#97816)
kelalaka avatar
in flag
What if in $P+Q+R$, $Q+R = P$? now you turned to double. You may say, I can calculate $P+Q$ then add $R$. In this case, we can say, who is going to check these?. Instead, we prefer [complete formulas](https://safecurves.cr.yp.to/complete.html) if possible.
kelalaka avatar
in flag
You are mixin points of the curve and points of its quadratic twist. [twist attack](https://crypto.stackexchange.com/a/87711/18298) is based on this.
fgrieu avatar
ng flag
Lack of associativity is a show-stopper in many cryptographic applications. Thus the question is about a solution looking for problem (and I don't know one).@kelalaka: performing point doubling the way you suggest requires associativity, which as pointed in the question does not hold.
mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.