Comparing the Pairing Efficiency over Composite-Order and Prime-Order Elliptic Curves