A pairing sweep systematically enumerates discriminants α and odd parameters x, evaluates r(z), q(z), and t(z) with z = αx², then tests prime and size conditions for pairing-friendly curves. section 14.5.1
A practical sweep follows this execution flow:
- Choose an embedding degree k and a maximum bit size lg2r; estimate the x limit from 2^(lg2r/(2k−2)). section 14.5.1
Command-line sweep
Running pairing_sweep_alpha 260 with k = 13 processes α values from 7 onward and reports 182 r primes. A result can contain 62-bit r, 76-bit q, ρ = 1.225806, and t = −34.
Figure 14.3 Program that sweeps over \(α\) to find pairing-friendly curves
Use the flow chart to inspect the sweep’s main control path from parameter selection through candidate testing. section 14.5.1
