Factorization Techniques, by Elvis Nunez and Chris Shaw
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
Fast Generation of RSA Keys Using Smooth Integers
1 Fast Generation of RSA Keys using Smooth Integers Vassil Dimitrov, Luigi Vigneri and Vidal Attias Abstract—Primality generation is the cornerstone of several essential cryptographic systems. The problem has been a subject of deep investigations, but there is still a substantial room for improvements. Typically, the algorithms used have two parts – trial divisions aimed at eliminating numbers with small prime factors and primality tests based on an easy-to-compute statement that is valid for primes and invalid for composites. In this paper, we will showcase a technique that will eliminate the first phase of the primality testing algorithms. The computational simulations show a reduction of the primality generation time by about 30% in the case of 1024-bit RSA key pairs. This can be particularly beneficial in the case of decentralized environments for shared RSA keys as the initial trial division part of the key generation algorithms can be avoided at no cost. This also significantly reduces the communication complexity. Another essential contribution of the paper is the introduction of a new one-way function that is computationally simpler than the existing ones used in public-key cryptography. This function can be used to create new random number generators, and it also could be potentially used for designing entirely new public-key encryption systems. Index Terms—Multiple-base Representations, Public-Key Cryptography, Primality Testing, Computational Number Theory, RSA ✦ 1 INTRODUCTION 1.1 Fast generation of prime numbers DDITIVE number theory is a fascinating area of The generation of prime numbers is a cornerstone of A mathematics. In it one can find problems with cryptographic systems such as the RSA cryptosystem. -
Sieving for Twin Smooth Integers with Solutions to the Prouhet-Tarry-Escott Problem
Sieving for twin smooth integers with solutions to the Prouhet-Tarry-Escott problem Craig Costello1, Michael Meyer2;3, and Michael Naehrig1 1 Microsoft Research, Redmond, WA, USA fcraigco,[email protected] 2 University of Applied Sciences Wiesbaden, Germany 3 University of W¨urzburg,Germany [email protected] Abstract. We give a sieving algorithm for finding pairs of consecutive smooth numbers that utilizes solutions to the Prouhet-Tarry-Escott (PTE) problem. Any such solution induces two degree-n polynomials, a(x) and b(x), that differ by a constant integer C and completely split into linear factors in Z[x]. It follows that for any ` 2 Z such that a(`) ≡ b(`) ≡ 0 mod C, the two integers a(`)=C and b(`)=C differ by 1 and necessarily contain n factors of roughly the same size. For a fixed smoothness bound B, restricting the search to pairs of integers that are parameterized in this way increases the probability that they are B-smooth. Our algorithm combines a simple sieve with parametrizations given by a collection of solutions to the PTE problem. The motivation for finding large twin smooth integers lies in their application to compact isogeny-based post-quantum protocols. The recent key exchange scheme B-SIDH and the recent digital signature scheme SQISign both require large primes that lie between two smooth integers; finding such a prime can be seen as a special case of finding twin smooth integers under the additional stipulation that their sum is a prime p. When searching for cryptographic parameters with 2240 ≤ p < 2256, an implementation of our sieve found primes p where p + 1 and p − 1 are 215-smooth; the smoothest prior parameters had a similar sized prime for which p−1 and p+1 were 219-smooth. -
Sieving by Large Integers and Covering Systems of Congruences
JOURNAL OF THE AMERICAN MATHEMATICAL SOCIETY Volume 20, Number 2, April 2007, Pages 495–517 S 0894-0347(06)00549-2 Article electronically published on September 19, 2006 SIEVING BY LARGE INTEGERS AND COVERING SYSTEMS OF CONGRUENCES MICHAEL FILASETA, KEVIN FORD, SERGEI KONYAGIN, CARL POMERANCE, AND GANG YU 1. Introduction Notice that every integer n satisfies at least one of the congruences n ≡ 0(mod2),n≡ 0(mod3),n≡ 1(mod4),n≡ 1(mod6),n≡ 11 (mod 12). A finite set of congruences, where each integer satisfies at least one them, is called a covering system. A famous problem of Erd˝os from 1950 [4] is to determine whether for every N there is a covering system with distinct moduli greater than N.In other words, can the minimum modulus in a covering system with distinct moduli be arbitrarily large? In regards to this problem, Erd˝os writes in [6], “This is perhaps my favourite problem.” It is easy to see that in a covering system, the reciprocal sum of the moduli is at least 1. Examples with distinct moduli are known with least modulus 2, 3, and 4, where this reciprocal sum can be arbitrarily close to 1; see [10], §F13. Erd˝os and Selfridge [5] conjectured that this fails for all large enough choices of the least modulus. In fact, they made the following much stronger conjecture. Conjecture 1. For any number B,thereisanumberNB,suchthatinacovering system with distinct moduli greater than NB, the sum of reciprocals of these moduli is greater than B. A version of Conjecture 1 also appears in [7]. -
Factoring Integers with a Brain-Inspired Computer John V
IEEE TRANSACTIONS ON CIRCUITS AND SYSTEMS—I: REGULAR PAPERS 1 Factoring Integers with a Brain-Inspired Computer John V. Monaco and Manuel M. Vindiola Abstract—The bound to factor large integers is dominated • Constant-time synaptic integration: a single neuron in the by the computational effort to discover numbers that are B- brain may receive electrical potential inputs along synap- smooth, i.e., integers whose largest prime factor does not exceed tic connections from thousands of other neurons. The B. Smooth numbers are traditionally discovered by sieving a polynomial sequence, whereby the logarithmic sum of prime incoming potentials are continuously and instantaneously factors of each polynomial value is compared to a threshold. integrated to compute the neuron’s membrane potential. On a von Neumann architecture, this requires a large block of Like the brain, neuromorphic architectures aim to per- memory for the sieving interval and frequent memory updates, form synaptic integration in constant time, typically by resulting in O(ln ln B) amortized time complexity to check each leveraging physical properties of the underlying device. value for smoothness. This work presents a neuromorphic sieve that achieves a constant-time check for smoothness by reversing Unlike the traditional CPU-based sieve, the factor base is rep- the roles of space and time from the von Neumann architecture resented in space (as spiking neurons) and the sieving interval and exploiting two characteristic properties of brain-inspired in time (as successive time steps). Sieving is performed by computation: massive parallelism and constant time synaptic integration. The effects on sieving performance of two common a population of leaky integrate-and-fire (LIF) neurons whose neuromorphic architectural constraints are examined: limited dynamics are simple enough to be implemented on a range synaptic weight resolution, which forces the factor base to be of current and future architectures. -
Introduction to Abstract Algebra “Rings First”
Introduction to Abstract Algebra \Rings First" Bruno Benedetti University of Miami January 2020 Abstract The main purpose of these notes is to understand what Z; Q; R; C are, as well as their polynomial rings. Contents 0 Preliminaries 4 0.1 Injective and Surjective Functions..........................4 0.2 Natural numbers, induction, and Euclid's theorem.................6 0.3 The Euclidean Algorithm and Diophantine Equations............... 12 0.4 From Z and Q to R: The need for geometry..................... 18 0.5 Modular Arithmetics and Divisibility Criteria.................... 23 0.6 *Fermat's little theorem and decimal representation................ 28 0.7 Exercises........................................ 31 1 C-Rings, Fields and Domains 33 1.1 Invertible elements and Fields............................. 34 1.2 Zerodivisors and Domains............................... 36 1.3 Nilpotent elements and reduced C-rings....................... 39 1.4 *Gaussian Integers................................... 39 1.5 Exercises........................................ 41 2 Polynomials 43 2.1 Degree of a polynomial................................. 44 2.2 Euclidean division................................... 46 2.3 Complex conjugation.................................. 50 2.4 Symmetric Polynomials................................ 52 2.5 Exercises........................................ 56 3 Subrings, Homomorphisms, Ideals 57 3.1 Subrings......................................... 57 3.2 Homomorphisms.................................... 58 3.3 Ideals......................................... -
Arxiv:1606.08690V5 [Math.NT] 27 Apr 2021 on Prime Factors of Mersenne
On prime factors of Mersenne numbers Ady Cambraia Jr,∗ Michael P. Knapp,† Ab´ılio Lemos∗, B. K. Moriya∗ and Paulo H. A. Rodrigues‡ [email protected] [email protected] [email protected] [email protected] paulo [email protected] April 29, 2021 Abstract n Let (Mn)n≥0 be the Mersenne sequence defined by Mn = 2 − 1. Let ω(n) be the number of distinct prime divisors of n. In this short note, we present a description of the Mersenne numbers satisfying ω(Mn) ≤ 3. Moreover, we prove that the inequality, (1−ǫ) log log n given ǫ> 0, ω(Mn) > 2 − 3 holds for almost all positive integers n. Besides, a we present the integer solutions (m, n, a) of the equation Mm+Mn = 2p with m,n ≥ 2, p an odd prime number and a a positive integer. 2010 Mathematics Subject Classification: 11A99, 11K65, 11A41. Keywords: Mersenne numbers, arithmetic functions, prime divisors. 1 Introduction arXiv:1606.08690v5 [math.NT] 27 Apr 2021 n Let (Mn)n≥0 be the Mersenne sequence defined by Mn = 2 − 1, for n ≥ 0. A simple argument shows that if Mn is a prime number, then n is a prime number. When Mn is a prime number, it is called a Mersenne prime. Throughout history, many researchers sought to find Mersenne primes. Some tools are very important for the search for Mersenne primes, mainly the Lucas-Lehmer test. There are papers (see for example [1, 5, 21]) that seek to describe the prime factors of Mn, where Mn is a composite number and n is a prime number. -
Primitive Indexes, Zsigmondy Numbers, and Primoverization
Primitive Indexes, Zsigmondy Numbers, and Primoverization Tejas R. Rao September 22, 2018 Abstract. We define a primitive index of an integer in a sequence to be the index of the term with the integer as a primitive divisor. For the sequences ku + hu and ku − hu, we discern a formula to find the primitive indexes of any composite number given the primitive indexes of its prime factors. We show how this formula reduces to a formula relating the multiplicative order of k modulo N to that of its prime factors. We then introduce immediate consequences of the formula: certain sequences which yield the same primitive indexes for numbers with the same n n unique prime factors, an expansion of the lifting the exponent lemma for ν2(k + h ), a simple formula to find any Zsigmondy number, a note on a certain class of pseudoprimes titled overpseudoprime, and a proof that numbers such as Wagstaff numbers are either overpseudoprime or prime. 1 The Formula A primitive index of a number is the index of the term in a sequence that has that number as a primitive divisor. Let k and h be positive integers for the duration of this paper. We u u u u N denote the primitive index of N in k − h as PN (k, h). For k + h , it is denoted P (k, h). Note that PN (k, 1) = ON (k), where ON (k) refers to the multiplicative order of k modulo N. Both are defined as the first positive integer m such that km ≡ 1 mod N. -
On Distribution of Semiprime Numbers
ISSN 1066-369X, Russian Mathematics (Iz. VUZ), 2014, Vol. 58, No. 8, pp. 43–48. c Allerton Press, Inc., 2014. Original Russian Text c Sh.T. Ishmukhametov, F.F. Sharifullina, 2014, published in Izvestiya Vysshikh Uchebnykh Zavedenii. Matematika, 2014, No. 8, pp. 53–59. On Distribution of Semiprime Numbers Sh. T. Ishmukhametov* and F. F. Sharifullina** Kazan (Volga Region) Federal University, ul. Kremlyovskaya 18, Kazan, 420008 Russia Received January 31, 2013 Abstract—A semiprime is a natural number which is the product of two (possibly equal) prime numbers. Let y be a natural number and g(y) be the probability for a number y to be semiprime. In this paper we derive an asymptotic formula to count g(y) for large y and evaluate its correctness for different y. We also introduce strongly semiprimes, i.e., numbers each of which is a product of two primes of large dimension, and investigate distribution of strongly semiprimes. DOI: 10.3103/S1066369X14080052 Keywords: semiprime integer, strongly semiprime, distribution of semiprimes, factorization of integers, the RSA ciphering method. By smoothness of a natural number n we mean possibility of its representation as a product of a large number of prime factors. A B-smooth number is a number all prime divisors of which are bounded from above by B. The concept of smoothness plays an important role in number theory and cryptography. Possibility of using the concept in cryptography is based on the fact that the procedure of decom- position of an integer into prime divisors (factorization) is a laborious computational process requiring significant calculating resources [1, 2]. -
WHEN IS an + 1 the SUM of TWO SQUARES?
WHEN IS an + 1 THE SUM OF TWO SQUARES? GREG DRESDEN, KYLIE HESS, SAIMON ISLAM, JEREMY ROUSE, AARON SCHMITT, EMILY STAMM, TERRIN WARREN, AND PAN YUE Abstract. Using Fermat's two squares theorem and properties of cyclotomic polynomials, we prove assertions about when numbers of the form an + 1 can be expressed as the sum of two integer squares. We prove that an + 1 is the sum of two squares for all n 2 N if and only if a is a perfect square. We also prove that for a ≡ 0; 1; 2 (mod 4); if an +1 is the sum of two squares, then aδ + 1 is the sum of two squares for all δjn; δ > 1. Using Aurifeuillian factorization, we show that if a is a prime and a ≡ 1 (mod 4), then there are either zero or infinitely many odd n such that an + 1 is the sum of two squares. When a ≡ 3 (mod 4); we define m to be the a+1 n least positive integer such that m is the sum of two squares, and prove that if a + 1 is the m n sum of two squares for any odd integer n; then mjn, and both a + 1 and m are sums of two squares. 1. Introduction Many facets of number theory revolve around investigating terms of a sequence that are inter- n esting. For example, if an = 2 − 1 is prime (called a Mersenne prime), then n itself must be prime (Theorem 18 of [5, p. 15]). In this case, the property that is interesting is primality. -
Arxiv:1206.0606V1 [Math.NT]
OVERPSEUDOPRIMES, AND MERSENNE AND FERMAT NUMBERS AS PRIMOVER NUMBERS VLADIMIR SHEVELEV, GILBERTO GARC´IA-PULGAR´IN, JUAN MIGUEL VELASQUEZ-SOTO,´ AND JOHN H. CASTILLO Abstract. We introduce a new class of pseudoprimes-so called “overpseu- doprimes to base b”, which is a subclass of strong pseudoprimes to base b. Denoting via |b|n the multiplicative order of b modulo n, we show that a composite n is overpseudoprime if and only if |b|d is invariant for all divisors d> 1 of n. In particular, we prove that all composite Mersenne numbers 2p − 1, where p is prime, are overpseudoprime to base 2 and squares of Wieferich primes are overpseudoprimes to base 2. Finally, we show that some kinds of well known numbers are overpseudoprime to a base b. 1. Introduction First and foremost, we recall some definitions and fix some notation. Let b an integer greater than 1 and N a positive integer relatively prime to b. Throughout, we denote by |b|N the multiplicative order of b modulo N. For a prime p, νp(N) means the greatest exponent of p in the prime factorization of N. Fermat’s little theorem implies that 2p−1 ≡ 1 (mod p), where p is an odd prime p. An odd prime p, is called a Wieferich prime if 2p−1 ≡ 1 (mod p2), We recall that a Poulet number, also known as Fermat pseudoprime to base 2, is a composite number n such that 2n−1 ≡ 1 (mod n). A Poulet number n which verifies that d divides 2d −2 for each divisor d of n, is called a Super-Poulet pseudoprime. -
Primality Testing and Sub-Exponential Factorization
Primality Testing and Sub-Exponential Factorization David Emerson Advisor: Howard Straubing Boston College Computer Science Senior Thesis May, 2009 Abstract This paper discusses the problems of primality testing and large number factorization. The first section is dedicated to a discussion of primality test- ing algorithms and their importance in real world applications. Over the course of the discussion the structure of the primality algorithms are devel- oped rigorously and demonstrated with examples. This section culminates in the presentation and proof of the modern deterministic polynomial-time Agrawal-Kayal-Saxena algorithm for deciding whether a given n is prime. The second section is dedicated to the process of factorization of large com- posite numbers. While primality and factorization are mathematically tied in principle they are very di⇥erent computationally. This fact is explored and current high powered factorization methods and the mathematical structures on which they are built are examined. 1 Introduction Factorization and primality testing are important concepts in mathematics. From a purely academic motivation it is an intriguing question to ask how we are to determine whether a number is prime or not. The next logical question to ask is, if the number is composite, can we calculate its factors. The two questions are invariably related. If we can factor a number into its pieces then it is obviously not prime, if we can’t then we know that it is prime. The definition of primality is very much derived from factorability. As we progress through the known and developed primality tests and factorization algorithms it will begin to become clear that while primality and factorization are intertwined they occupy two very di⇥erent levels of computational di⇧culty. -
Unique Factorization of Ideals in OK
IDEAL FACTORIZATION KEITH CONRAD 1. Introduction We will prove here the fundamental theorem of ideal theory in number fields: every nonzero proper ideal in the integers of a number field admits unique factorization into a product of nonzero prime ideals. Then we will explore how far the techniques can be generalized to other domains. Definition 1.1. For ideals a and b in a commutative ring, write a j b if b = ac for an ideal c. Theorem 1.2. For elements α and β in a commutative ring, α j β as elements if and only if (α) j (β) as ideals. Proof. If α j β then β = αγ for some γ in the ring, so (β) = (αγ) = (α)(γ). Thus (α) j (β) as ideals. Conversely, if (α) j (β), write (β) = (α)c for an ideal c. Since (α)c = αc = fαc : c 2 cg and β 2 (β), β = αc for some c 2 c. Thus α j β in the ring. Theorem 1.2 says that passing from elements to the principal ideals they generate does not change divisibility relations. However, irreducibility can change. p Example 1.3. In Z[ −5],p 2 is irreduciblep as an element but the principal ideal (2) factors nontrivially: (2) = (2; 1 + −5)(2; 1 − −p5). p To see that neither of the idealsp (2; 1 + −5) and (2; 1 − −5) is the unit ideal, we give two arguments. Suppose (2; 1 + −5) = (1). Then we can write p p p 1 = 2(a + b −5) + (1 + −5)(c + d −5) for some integers a; b; c, and d.