Why not compose bilinear maps for higher arity maps?

Joseph Johnston

4/22/24, 10:18 PM

I understand the only multilinear maps used in cryptography are bilinear maps, and higher arity multilinear maps are not "known." Why does the composition of bilinear maps not yield usable higher-arity maps? I thought the primary feature of multilinear maps in cryptography is simply their multilinearity along with non-degeneracy and efficient computability, so despite restricting to a very small class of multilinear maps (those composed of bilinear maps), those three properties are preserved.

Are my assumptions wrong? Would bilinear maps with appropriate signatures for desired compositions be too difficult to find? What am I missing?

1 + 0

elliptic-curves

pairings

Score:1

Crypto

Daniel S

4/23/24, 5:35 AM

If I understand your question correctly, it is because the bilinear maps that we do know (essentially variants on elliptic curve pairings) have an image space that is distinct from their domain. Specifically, they pair elliptic curve points and output an element of a multiplicative group of a finite field.

To compose the bilinear map, we'd have to take an element of a finite field and treat it as an elliptic curve point in some homomorphic fashion. The only way that I know to do this is to find the discrete logarithm of the finite filed element which is supposed to be hard if the pairing is to be cryptographically secure.

+ 1

Joseph Johnston

4/23/24, 12:19 PM

I see. I was mistaken that the target group was some other elliptic curve group.

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: Why not compose bilinear maps for higher arity maps?

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.