The Micro Edition of the Java 2 platform (J2ME) provides an application environment specii??cally designed to address the demands of embedded devices like cell phones, PDAs or set-top boxes. Since the J2ME platform does not include a crypto package, developers are forced to use third-party classes or to implement all cryptographic primitives from scratch. However, most existing implementations of elliptic curve (EC) cryptography for J2ME do not perform well on resource-restricted devices, in most cases due to poor ei??ciency of the underlying arithmetic operations. In this paper we present an optimized Java implementation of EC scalar multiplication that combines ei??cient i??nite-i??eld arithmetic with ei??cient group arithmetic. More precisely, our implementation uses a pseudo-Mersenne (PM) prime i??eld for fast modular reduction and a Gallant-Lambert-Vanstone (GLV) curve with an ei??ciently computable endomorphism to speed up the scalar multiplication with random base points. Our experimental results show that a conventional mobile phone without Java acceleration, such as the Nokia 6610, is capable to execute a 174-bit scalar multiplication in roughly 400 msec, which is more than 45 times faster than the widely-used Bouncy Castle Lightweight Crypto API for J2ME.