Post
Topic
Board Development & Technical Discussion
Merits 6 from 3 users
Re: How to calculate Lambda and Beta for n and p?
by
j2002ba2
on 11/10/2023, 17:54:12 UTC
⭐ Merited by ABCbits (3) ,NotATether (2) ,albert0bsd (1)
lambda and beta are non-trivial cube roots of 1 modulo n and p.
λ3 = 1 (mod n)
β3 = 1 (mod p)
[λ](x,y) = (βx,y)

Since there are 3 of each you'd have to match them (2 are non-trivial, so there is just one equality check).

You could find how to get such root of 1 here.

So, let your curve is modulo q, and has order m, both prime numbers.
Compute a primitive root of 1 modulo q:
a≠1
aq-1 = 1 (mod q)
Then the cube root of 1 would be:
k = a(q-1)/3 = 11/3 (mod q)

Instead of finding a primitive root of 1, one could directly find a cube root, this is faster:
k = c(q-1)/3 ≠ 1 (mod q)
for c = 2,3,...

Do the same modulo the order of the curve m:
b≠1
bm-1 = 1 (mod m)
λ = b(m-1)/3 = 11/3 (mod m)

Then check which one matches:
[λ](x,y) = (kx,y)
β = k
or
[λ](x,y) = (k2x,y)
β = k2 (mod q)