Integer Complexity, Addition Chains, and Well-Ordering
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
Optimal Addition Chains and the Scholz Conjecture Zara Siddique December 8, 2015
Optimal Addition Chains and the Scholz Conjecture Zara Siddique December 8, 2015 1 Introduction An addition chain can be described as sequence of natural numbers (starting at 1), such that each element is the sum of two numbers previously in the sequence. This can be written mathematically as: v = (v0; :::; vs); with v0 = 1 and vs = n for each vi holds: vi = vj + vk where 0 ≤ j; k ≤ i − 1 [1] An optimal addition chain refers to the addition chain of shortest length for n, denoted l(n). For example, l(5) = 3 (since the shortest chain is 1 + 1 = 2, 2 + 2 = 4, 4 + 1 = 5). [2] A key application of this is addition-chain exponentiation, where the optimal addition chain can be used to calculate positive integer powers with a minimal number of multiplications. Figure 1: The first 10 addition chains: for both the highlighted addition chains, n = 4, however there exists an optimal chain [3]. 2 Finding the length of the optimal addition chain The difficulty in finding optimal addition chains is that there is no way to calculate one directly (yet). For example, consider the following addition chains for n = 15: l(15) = (1, 2, 4, 8, 12, 13, 15) = 6 l(15) = (1, 2, 3, 6, 12, 15) = 5 While it intuitively makes sense to calculate the largest number possible to get closer to n, this example shows that early on in the addition chain, small unpredictable changes can affect the final length. To get around this problem, the code below calculates every possible addition chain, and (if n is found,) compares the length of all addition chains containing n to find the one of shortest length. -
Addition Chains
Addition chains Pierre Castéran LaBRI, Univ. Bordeaux, CNRS UMR 5800, Bordeaux-INP September 5, 2020 DRAFT 2 Contents 1 Introduction 5 2 Smart Computation of xn 9 2.1 Introduction . 9 2.2 Some basic implementations . 9 2.2.1 A semi-naive algorithm . 10 2.2.2 A truly logarithmic exponentiation function . 11 2.2.3 Examples of computation . 12 2.2.4 Formal specification of an exponentiation function: a first attempt . 14 2.3 Representing Monoids in Coq . 15 2.3.1 A common notation for multiplication . 15 2.3.2 The Monoid Type Class . 17 2.3.3 Building Instances of Monoid ................ 17 2.3.4 Matrices on a semi-ring . 19 2.3.5 Monoids and Equivalence Relations . 20 2.4 Computing Powers in any EMonoid . 22 2.4.1 The naive (linear) Algorithm . 23 2.4.2 The Binary Exponentiation Algorithm . 24 2.4.3 Refinement and Correctness . 24 2.4.4 Proof of correctness of binary exponentiation w.r.t. the function power ........................ 25 2.4.5 Equivalence of the two exponentiation functions . 26 2.5 Comparing Exponentiation Algorithms with respect to Efficiency 27 2.5.1 Addition chains . 28 2.5.2 A type for addition chains . 29 2.5.3 Chains as a (small) programming language . 32 2.6 Proving a chain’s correctness . 33 2.6.1 Proof by rewriting . 34 2.6.2 Correctness Proofs by Reflection . 35 2.6.3 reflection tactic . 38 2.6.4 Chain correctness for —practically — free! . 39 2.7 Certified Chain Generators . 43 2.7.1 Definitions . -
A Survey of Addition Chain Algorithms
A Survey of Addition Chain Algorithms Thomas Schibler [email protected] Department of Computer Science University of California Santa Barbara June 13, 2018 Abstract Modular exponentiation appears as a necessary computational tool in many cryptographic systems. Specifically, given modulus n, base b and exponent e, exponentiation computes be mod n through repeated multiplications. To minimize the number of such multiplications, an addition chain of exponents is computed, such that each exponent in the chain can be expressed as the sum of two previous exponents. While the problem of finding a minimal addition chain for a given exponent e is widely thought to be intractable, many algorithms exist to find short chains. We survey a variety of addition chain algorithms, focusing on those which partition the bit representation of the target exponent into manageable sized blocks. 1 Introduction Addition Chains are an important tool in cryptographic settings, particularly for public key cryptography algorithms like RSA, in which fast modular exponentiation is a must. For background, modular exponentiation involves computing the value be mod n for some base b, exponent e, and modulus n. While in general the value of be can grow unbounded particularly as e becomes large, be mod n can never exceed the value of n. Naturally, we want to compute the modular result without having to deal with such large numbers. Indeed, in crypto settings the raw value be would often exceed any feasible memory limit. Fortunately, we have the identity, c mod n = (a mod n) · (b mod n) if a = b · c. Therefore for modular exponentiation, decomposing the exponent e, such that e = e1 + e2, yields be mod n = (be1 mod n) · (be2 mod n); allowing us to condense the result of intermediate multiplications to the size of the modulus n. -
Calculating Optimal Addition Chains
Computing (2011) 91:265–284 DOI 10.1007/s00607-010-0118-8 Calculating optimal addition chains Neill Michael Clift Received: 16 January 2010 / Accepted: 22 August 2010 / Published online: 11 September 2010 © The Author(s) 2010. This article is published with open access at Springerlink.com Abstract An addition chain is a finite sequence of positive integers 1 = a0 ≤ a1 ≤ ···≤ar = n with the property that for all i > 0 there exists a j, k with ai = a j + ak and r ≥ i > j ≥ k ≥ 0. An optimal addition chain is one of shortest possible length r denoted l(n). A new algorithm for calculating optimal addition chains is described. This algorithm is far faster than the best known methods when used to calculate ranges of optimal addition chains. When used for single values the algorithm is slower than the best known methods but does not require the use of tables of pre-computed values. Hence it is suitable for calculating optimal addition chains for point values above cur- rently calculated chain limits. The lengths of all optimal addition chains for n ≤ 232 were calculated and the conjecture that l(2n) ≥ l(n) was disproved. Exact equality in the Scholz–Brauer conjecture l(2n − 1) = l(n) + n − 1 was confirmed for many new values. Keywords Addition chains · Exponentiation · Scholz–Brauer · Sequences · Optimization Mathematics Subject Classification (2000) 11Y16 · 11Y55 · 05C20 1 Introduction An addition chain A is a finite sequence of positive integers called elements 1 = a0 ≤ a1 ≤ ··· ≤ ar = n with the property that for all i > 0 there exists a j, k Communicated by C.C.