Doubling a point on an elliptic curve












3












$begingroup$


I've a programming background and am just about to get into a project where Elliptic Curve Cryptography (ECC) is used. Although our libraries deal with the details I still like to do background reading so started with the ECC chapter of Understanding Cryptography. Everything was fine until I came upon this example of point doubling over $Z_{17}$:



enter image description here



I can't figure out how he gets $s$. For example the $(2cdot1)^{-1}(3cdot5^2+2)$ why does that evaluate to $2^{-1} cdot 9$? From looking at it I would have thought $(3cdot5^2+2)$ evaluates to $77$ so giving $2^{-1}cdot77$ or $77div2$ for the whole expression. Obviously the math doesn't work in the way I expect, is it something to do with the dot product not being normal multiplication? Or something else?



p.s. Sorry about formatting, I'm looking up how to do the Tex for the site now.






elliptic-curves







share|cite|improve this question











$endgroup$












  • $begingroup$
    Are you familiar at all with modular arithmetic? $77=9$ in $mathbb{Z}_{17}$.
    $endgroup$
    – fretty
    Jun 27 '13 at 14:21








  • 1




    $begingroup$
    Yes, to be precise, the author should have written $(2cdot 1)^{-1}(3cdot 5^2+2)equiv 2^{-1}cdot 9 bmod 17$, and not just $=$.
    $endgroup$
    – Álvaro Lozano-Robledo
    Jun 27 '13 at 14:23










  • $begingroup$
    @ÁlvaroLozano-Robledo Thanks, can't believe it's that simple for that bit... So you have to apply the modulus operator the whole way through? So that bit is equivalent to $9cdot9$ because $9/2$ is 4.5 and $89mod17$ is 4 and you truncate in $Z$? Just not seeing how $9cdot9 = 13mod17$
    $endgroup$
    – Peanut
    Jun 27 '13 at 14:35








  • 1




    $begingroup$
    $9cdot 9 = 81 = 13 + 68 = 13 + 4cdot 17 equiv 13 bmod 17$.
    $endgroup$
    – Álvaro Lozano-Robledo
    Jun 27 '13 at 14:39






  • 1




    $begingroup$
    I asked nearly this identical question on Crypto crypto.stackexchange.com/questions/64456, and the answer there may also be worth looking at.
    $endgroup$
    – Brian M. Hunt
    Dec 1 '18 at 13:44
















3












$begingroup$


I've a programming background and am just about to get into a project where Elliptic Curve Cryptography (ECC) is used. Although our libraries deal with the details I still like to do background reading so started with the ECC chapter of Understanding Cryptography. Everything was fine until I came upon this example of point doubling over $Z_{17}$:



enter image description here



I can't figure out how he gets $s$. For example the $(2cdot1)^{-1}(3cdot5^2+2)$ why does that evaluate to $2^{-1} cdot 9$? From looking at it I would have thought $(3cdot5^2+2)$ evaluates to $77$ so giving $2^{-1}cdot77$ or $77div2$ for the whole expression. Obviously the math doesn't work in the way I expect, is it something to do with the dot product not being normal multiplication? Or something else?



p.s. Sorry about formatting, I'm looking up how to do the Tex for the site now.






elliptic-curves







share|cite|improve this question











$endgroup$












  • $begingroup$
    Are you familiar at all with modular arithmetic? $77=9$ in $mathbb{Z}_{17}$.
    $endgroup$
    – fretty
    Jun 27 '13 at 14:21








  • 1




    $begingroup$
    Yes, to be precise, the author should have written $(2cdot 1)^{-1}(3cdot 5^2+2)equiv 2^{-1}cdot 9 bmod 17$, and not just $=$.
    $endgroup$
    – Álvaro Lozano-Robledo
    Jun 27 '13 at 14:23










  • $begingroup$
    @ÁlvaroLozano-Robledo Thanks, can't believe it's that simple for that bit... So you have to apply the modulus operator the whole way through? So that bit is equivalent to $9cdot9$ because $9/2$ is 4.5 and $89mod17$ is 4 and you truncate in $Z$? Just not seeing how $9cdot9 = 13mod17$
    $endgroup$
    – Peanut
    Jun 27 '13 at 14:35








  • 1




    $begingroup$
    $9cdot 9 = 81 = 13 + 68 = 13 + 4cdot 17 equiv 13 bmod 17$.
    $endgroup$
    – Álvaro Lozano-Robledo
    Jun 27 '13 at 14:39






  • 1




    $begingroup$
    I asked nearly this identical question on Crypto crypto.stackexchange.com/questions/64456, and the answer there may also be worth looking at.
    $endgroup$
    – Brian M. Hunt
    Dec 1 '18 at 13:44














3












3








3





$begingroup$


I've a programming background and am just about to get into a project where Elliptic Curve Cryptography (ECC) is used. Although our libraries deal with the details I still like to do background reading so started with the ECC chapter of Understanding Cryptography. Everything was fine until I came upon this example of point doubling over $Z_{17}$:



enter image description here



I can't figure out how he gets $s$. For example the $(2cdot1)^{-1}(3cdot5^2+2)$ why does that evaluate to $2^{-1} cdot 9$? From looking at it I would have thought $(3cdot5^2+2)$ evaluates to $77$ so giving $2^{-1}cdot77$ or $77div2$ for the whole expression. Obviously the math doesn't work in the way I expect, is it something to do with the dot product not being normal multiplication? Or something else?



p.s. Sorry about formatting, I'm looking up how to do the Tex for the site now.






elliptic-curves







share|cite|improve this question











$endgroup$




I've a programming background and am just about to get into a project where Elliptic Curve Cryptography (ECC) is used. Although our libraries deal with the details I still like to do background reading so started with the ECC chapter of Understanding Cryptography. Everything was fine until I came upon this example of point doubling over $Z_{17}$:



enter image description here



I can't figure out how he gets $s$. For example the $(2cdot1)^{-1}(3cdot5^2+2)$ why does that evaluate to $2^{-1} cdot 9$? From looking at it I would have thought $(3cdot5^2+2)$ evaluates to $77$ so giving $2^{-1}cdot77$ or $77div2$ for the whole expression. Obviously the math doesn't work in the way I expect, is it something to do with the dot product not being normal multiplication? Or something else?



p.s. Sorry about formatting, I'm looking up how to do the Tex for the site now.






elliptic-curves




elliptic-curves






share|cite|improve this question















share|cite|improve this question













share|cite|improve this question




share|cite|improve this question








edited Jun 27 '13 at 14:45







Peanut

















asked Jun 27 '13 at 14:14









PeanutPeanut

15029




15029












  • $begingroup$
    Are you familiar at all with modular arithmetic? $77=9$ in $mathbb{Z}_{17}$.
    $endgroup$
    – fretty
    Jun 27 '13 at 14:21








  • 1




    $begingroup$
    Yes, to be precise, the author should have written $(2cdot 1)^{-1}(3cdot 5^2+2)equiv 2^{-1}cdot 9 bmod 17$, and not just $=$.
    $endgroup$
    – Álvaro Lozano-Robledo
    Jun 27 '13 at 14:23










  • $begingroup$
    @ÁlvaroLozano-Robledo Thanks, can't believe it's that simple for that bit... So you have to apply the modulus operator the whole way through? So that bit is equivalent to $9cdot9$ because $9/2$ is 4.5 and $89mod17$ is 4 and you truncate in $Z$? Just not seeing how $9cdot9 = 13mod17$
    $endgroup$
    – Peanut
    Jun 27 '13 at 14:35








  • 1




    $begingroup$
    $9cdot 9 = 81 = 13 + 68 = 13 + 4cdot 17 equiv 13 bmod 17$.
    $endgroup$
    – Álvaro Lozano-Robledo
    Jun 27 '13 at 14:39






  • 1




    $begingroup$
    I asked nearly this identical question on Crypto crypto.stackexchange.com/questions/64456, and the answer there may also be worth looking at.
    $endgroup$
    – Brian M. Hunt
    Dec 1 '18 at 13:44


















  • $begingroup$
    Are you familiar at all with modular arithmetic? $77=9$ in $mathbb{Z}_{17}$.
    $endgroup$
    – fretty
    Jun 27 '13 at 14:21








  • 1




    $begingroup$
    Yes, to be precise, the author should have written $(2cdot 1)^{-1}(3cdot 5^2+2)equiv 2^{-1}cdot 9 bmod 17$, and not just $=$.
    $endgroup$
    – Álvaro Lozano-Robledo
    Jun 27 '13 at 14:23










  • $begingroup$
    @ÁlvaroLozano-Robledo Thanks, can't believe it's that simple for that bit... So you have to apply the modulus operator the whole way through? So that bit is equivalent to $9cdot9$ because $9/2$ is 4.5 and $89mod17$ is 4 and you truncate in $Z$? Just not seeing how $9cdot9 = 13mod17$
    $endgroup$
    – Peanut
    Jun 27 '13 at 14:35








  • 1




    $begingroup$
    $9cdot 9 = 81 = 13 + 68 = 13 + 4cdot 17 equiv 13 bmod 17$.
    $endgroup$
    – Álvaro Lozano-Robledo
    Jun 27 '13 at 14:39






  • 1




    $begingroup$
    I asked nearly this identical question on Crypto crypto.stackexchange.com/questions/64456, and the answer there may also be worth looking at.
    $endgroup$
    – Brian M. Hunt
    Dec 1 '18 at 13:44
















$begingroup$
Are you familiar at all with modular arithmetic? $77=9$ in $mathbb{Z}_{17}$.
$endgroup$
– fretty
Jun 27 '13 at 14:21






$begingroup$
Are you familiar at all with modular arithmetic? $77=9$ in $mathbb{Z}_{17}$.
$endgroup$
– fretty
Jun 27 '13 at 14:21






1




1




$begingroup$
Yes, to be precise, the author should have written $(2cdot 1)^{-1}(3cdot 5^2+2)equiv 2^{-1}cdot 9 bmod 17$, and not just $=$.
$endgroup$
– Álvaro Lozano-Robledo
Jun 27 '13 at 14:23




$begingroup$
Yes, to be precise, the author should have written $(2cdot 1)^{-1}(3cdot 5^2+2)equiv 2^{-1}cdot 9 bmod 17$, and not just $=$.
$endgroup$
– Álvaro Lozano-Robledo
Jun 27 '13 at 14:23












$begingroup$
@ÁlvaroLozano-Robledo Thanks, can't believe it's that simple for that bit... So you have to apply the modulus operator the whole way through? So that bit is equivalent to $9cdot9$ because $9/2$ is 4.5 and $89mod17$ is 4 and you truncate in $Z$? Just not seeing how $9cdot9 = 13mod17$
$endgroup$
– Peanut
Jun 27 '13 at 14:35






$begingroup$
@ÁlvaroLozano-Robledo Thanks, can't believe it's that simple for that bit... So you have to apply the modulus operator the whole way through? So that bit is equivalent to $9cdot9$ because $9/2$ is 4.5 and $89mod17$ is 4 and you truncate in $Z$? Just not seeing how $9cdot9 = 13mod17$
$endgroup$
– Peanut
Jun 27 '13 at 14:35






1




1




$begingroup$
$9cdot 9 = 81 = 13 + 68 = 13 + 4cdot 17 equiv 13 bmod 17$.
$endgroup$
– Álvaro Lozano-Robledo
Jun 27 '13 at 14:39




$begingroup$
$9cdot 9 = 81 = 13 + 68 = 13 + 4cdot 17 equiv 13 bmod 17$.
$endgroup$
– Álvaro Lozano-Robledo
Jun 27 '13 at 14:39




1




1




$begingroup$
I asked nearly this identical question on Crypto crypto.stackexchange.com/questions/64456, and the answer there may also be worth looking at.
$endgroup$
– Brian M. Hunt
Dec 1 '18 at 13:44




$begingroup$
I asked nearly this identical question on Crypto crypto.stackexchange.com/questions/64456, and the answer there may also be worth looking at.
$endgroup$
– Brian M. Hunt
Dec 1 '18 at 13:44










1 Answer
1






active

oldest

votes


















6












$begingroup$

All arithmetic is done modulo $17$, so
$$(2cdot 1)^{-1}(3cdot 5^2+2)equiv 2^{-1}cdot 9bmod 17$$
is a congruence, not an equality in $mathbb{Q}$.



Moreover, $9cdot 9equiv 13 bmod 17$ because
$$9cdot 9 = 81 = 13 + 68 = 13 + 4cdot 17 equiv 13 bmod 17,$$
or, equivalently,
$$9cdot 9equiv (-8)cdot (-8)equiv 64equiv 16cdot 4equiv -4equiv 13bmod 17.$$






share|cite|improve this answer









$endgroup$













    Your Answer





    StackExchange.ifUsing("editor", function () {
    return StackExchange.using("mathjaxEditing", function () {
    StackExchange.MarkdownEditor.creationCallbacks.add(function (editor, postfix) {
    StackExchange.mathjaxEditing.prepareWmdForMathJax(editor, postfix, [["$", "$"], ["\\(","\\)"]]);
    });
    });
    }, "mathjax-editing");

    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "69"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    noCode: true, onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fmath.stackexchange.com%2fquestions%2f430836%2fdoubling-a-point-on-an-elliptic-curve%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    6












    $begingroup$

    All arithmetic is done modulo $17$, so
    $$(2cdot 1)^{-1}(3cdot 5^2+2)equiv 2^{-1}cdot 9bmod 17$$
    is a congruence, not an equality in $mathbb{Q}$.



    Moreover, $9cdot 9equiv 13 bmod 17$ because
    $$9cdot 9 = 81 = 13 + 68 = 13 + 4cdot 17 equiv 13 bmod 17,$$
    or, equivalently,
    $$9cdot 9equiv (-8)cdot (-8)equiv 64equiv 16cdot 4equiv -4equiv 13bmod 17.$$






    share|cite|improve this answer









    $endgroup$


















      6












      $begingroup$

      All arithmetic is done modulo $17$, so
      $$(2cdot 1)^{-1}(3cdot 5^2+2)equiv 2^{-1}cdot 9bmod 17$$
      is a congruence, not an equality in $mathbb{Q}$.



      Moreover, $9cdot 9equiv 13 bmod 17$ because
      $$9cdot 9 = 81 = 13 + 68 = 13 + 4cdot 17 equiv 13 bmod 17,$$
      or, equivalently,
      $$9cdot 9equiv (-8)cdot (-8)equiv 64equiv 16cdot 4equiv -4equiv 13bmod 17.$$






      share|cite|improve this answer









      $endgroup$
















        6












        6








        6





        $begingroup$

        All arithmetic is done modulo $17$, so
        $$(2cdot 1)^{-1}(3cdot 5^2+2)equiv 2^{-1}cdot 9bmod 17$$
        is a congruence, not an equality in $mathbb{Q}$.



        Moreover, $9cdot 9equiv 13 bmod 17$ because
        $$9cdot 9 = 81 = 13 + 68 = 13 + 4cdot 17 equiv 13 bmod 17,$$
        or, equivalently,
        $$9cdot 9equiv (-8)cdot (-8)equiv 64equiv 16cdot 4equiv -4equiv 13bmod 17.$$






        share|cite|improve this answer









        $endgroup$



        All arithmetic is done modulo $17$, so
        $$(2cdot 1)^{-1}(3cdot 5^2+2)equiv 2^{-1}cdot 9bmod 17$$
        is a congruence, not an equality in $mathbb{Q}$.



        Moreover, $9cdot 9equiv 13 bmod 17$ because
        $$9cdot 9 = 81 = 13 + 68 = 13 + 4cdot 17 equiv 13 bmod 17,$$
        or, equivalently,
        $$9cdot 9equiv (-8)cdot (-8)equiv 64equiv 16cdot 4equiv -4equiv 13bmod 17.$$







        share|cite|improve this answer












        share|cite|improve this answer



        share|cite|improve this answer










        answered Jun 27 '13 at 14:46









        Álvaro Lozano-RobledoÁlvaro Lozano-Robledo

        12.4k21839




        12.4k21839






























            draft saved

            draft discarded




















































            Thanks for contributing an answer to Mathematics Stack Exchange!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid …



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            Use MathJax to format equations. MathJax reference.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fmath.stackexchange.com%2fquestions%2f430836%2fdoubling-a-point-on-an-elliptic-curve%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            -

            Popular posts from this blog

            Le Mesnil-Réaume

            Image
            Le Mesnil-Réaume Region Normandie Département Seine-Maritime Arrondissement Dieppe Kanton Eu Gemeindeverband Villes Sœurs Koordinaten 49° 58′  N , 1° 27′  O 49.9725 1.4463888888889 Koordinaten: 49° 58′  N , 1° 27′  O Höhe 92–156 m Fläche 5,55 km 2 Einwohner 793 (1. Januar 2016) Bevölkerungsdichte 143 Einw./km 2 Postleitzahl 76260 INSEE-Code 76435 Website http://www.mesnil-reaume.net/ Rathaus (Mairie) und Schule von Le Mesnil-Réaume Le Mesnil-Réaume ist eine französische Gemeinde mit 793 Einwohnern (Stand: 1. Januar 2016) im Département Seine-Maritime in der Region Normandie (vor 2016 Haute-Normandie). Sie gehört zum Arrondissement Dieppe und zum Kanton Eu. Die Einwohner werden Mesnillais genannt. Inhaltsverzeichnis 1 Geographie 2 Bevölkerungsentwicklung 3 Sehenswürdigkeiten 4 Weblinks Geographie | Le Mesnil-Réaume liegt etwa 43 Kilomet
            Read more

            Ida-Boy-Ed-Garten

            Image
            Die Lage des Ida-Boy-Ed-Gartens, rot markiert Der Ida-Boy-Ed-Garten Der Ida-Boy-Ed-Garten, Blick von der Wakenitzmauer durch das Tor in der Stadtmauer Der Ida-Boy-Ed-Garten ist eine Straße der Lübecker Altstadt. Inhaltsverzeichnis 1 Lage 2 Geschichte 3 Literatur 4 Weblinks Lage | Der etwa 90 Meter lange Ida-Boy-Ed-Garten befindet sich an der nördlichen Spitze der Altstadtinsel, vor dem Burgtor. Die in einem Bogen durch eine Grünanlage hangaufwärts führende Straße verbindet die Wakenitzmauer mit der Burgtorbrücke. Geschichte | Der heutige Ida-Boy-Ed-Garten wurde ursprünglich als Verlängerung der Wakenitzmauer angelegt. 1903 wurde in den erhaltenen Teil der mittelalterlichen Stadtmauer, an dem die Wakenitzmauer bei der Einmündung der Kaiserstraße begann, ein Tor mit einem großen Bogen für die Durchführung der Straße und zwei kleineren seitlichen Öffnungen für Fußgänger gebrochen, um für die neu errichteten Wohnhäuser in diesem Bereich
            Read more

            web3.py web3.isConnected() returns false always

            Image
            1 I am trying an tutorial on web3.py so i created a profile in infura and used its project id.But it shows false always when i try web3.isConnected() PS C:UsersHP> python Python 3.6.3 (v3.6.3:2c5fed8, Oct 3 2017, 18:11:49) [MSC v.1900 64 bit (AMD64)] on win32 Type "help", "copyright", "credits" or "license" for more information. >>> from web3 import Web3 >>> infura_url = "mainnet.infura.io/v3/******************************" >>> web3 = Web3(Web3.HTTPProvider(infura_url)) >>> web3.isConnected() False web3.py share | improve this question
            Read more