Demonstration of "A Note on Subgroup Security in Pairing-Based Cryptography" For the details, see a paper. When you refer to this implementation, please use this citation. How to Use First of all, Sage 8.0 or later is required. Then: $ make License MIT License Acknowledgment We thank developers of sagemath/docker-images for providing a container of SageMath.