Posts  / #POST-221421
REDDIT

I read there re cases where the final exponentation on elliptic curves pairings is easy to invert, but is it true?

A
Mar 7, 2026 · 11:04

I read that for some curve this is possible with the text being specifically, if `$\gcd((p^k-1)/r, r) = 1$, the final exponentiation is a bijection on the r-torsion and can be inverted by computing the modular inverse of the exponent modulo r`.

But is it true as it seems such assertion will always be true to me for prime order, and if yes what does it means?