We give an overview of pseudorandom number generators (PRNGs) based on elliptic curves over finite fields. Many PRNGs proposed for the multiplicative group of a finite field can be generalized to the group of -rational points of elliptic curves - clearly with different bounds. We consider in detail the power generator - starting from a point the sequence for some (secret) integer . So following elements of the sequence can be constructed if the discrete logarithm problem is easy, i.e. if can be computed from the knowledge of and . This study also serves a second purpose - if the sequence of powers of an element would turn out to be biased, e.g. some bits were fixed for certain multiples, the discrete logarithm problem would be weaker than assumed as some bits of the exponent would leak. To compute scalar multiples on elliptic curves one can use Koblitz curves, these are curves defined over a small finite field which are then considered over a large extension field. We state results on the distribution of the scalar multiples of points.
Back to the Index