Elliptic Curves Over Finite Fields and Applications to Cryptography
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
APPLICATIONS of GALOIS THEORY 1. Finite Fields Let F Be a Finite Field
CHAPTER IX APPLICATIONS OF GALOIS THEORY 1. Finite Fields Let F be a finite field. It is necessarily of nonzero characteristic p and its prime field is the field with p r elements Fp.SinceFis a vector space over Fp,itmusthaveq=p elements where r =[F :Fp]. More generally, if E ⊇ F are both finite, then E has qd elements where d =[E:F]. As we mentioned earlier, the multiplicative group F ∗ of F is cyclic (because it is a finite subgroup of the multiplicative group of a field), and clearly its order is q − 1. Hence each non-zero element of F is a root of the polynomial Xq−1 − 1. Since 0 is the only root of the polynomial X, it follows that the q elements of F are roots of the polynomial Xq − X = X(Xq−1 − 1). Hence, that polynomial is separable and F consists of the set of its roots. (You can also see that it must be separable by finding its derivative which is −1.) We q may now conclude that the finite field F is the splitting field over Fp of the separable polynomial X − X where q = |F |. In particular, it is unique up to isomorphism. We have proved the first part of the following result. Proposition. Let p be a prime. For each q = pr, there is a unique (up to isomorphism) finite field F with |F | = q. Proof. We have already proved the uniqueness. Suppose q = pr, and consider the polynomial Xq − X ∈ Fp[X]. As mentioned above Df(X)=−1sof(X) cannot have any repeated roots in any extension, i.e. -
A Note on Presentation of General Linear Groups Over a Finite Field
Southeast Asian Bulletin of Mathematics (2019) 43: 217–224 Southeast Asian Bulletin of Mathematics c SEAMS. 2019 A Note on Presentation of General Linear Groups over a Finite Field Swati Maheshwari and R. K. Sharma Department of Mathematics, Indian Institute of Technology Delhi, New Delhi, India Email: [email protected]; [email protected] Received 22 September 2016 Accepted 20 June 2018 Communicated by J.M.P. Balmaceda AMS Mathematics Subject Classification(2000): 20F05, 16U60, 20H25 Abstract. In this article we have given Lie regular generators of linear group GL(2, Fq), n where Fq is a finite field with q = p elements. Using these generators we have obtained presentations of the linear groups GL(2, F2n ) and GL(2, Fpn ) for each positive integer n. Keywords: Lie regular units; General linear group; Presentation of a group; Finite field. 1. Introduction Suppose F is a finite field and GL(n, F) is the general linear the group of n × n invertible matrices and SL(n, F) is special linear group of n × n matrices with determinant 1. We know that GL(n, F) can be written as a semidirect product, GL(n, F)= SL(n, F) oF∗, where F∗ denotes the multiplicative group of F. Let H and K be two groups having presentations H = hX | Ri and K = hY | Si, then a presentation of semidirect product of H and K is given by, −1 H oη K = hX, Y | R,S,xyx = η(y)(x) ∀x ∈ X,y ∈ Y i, where η : K → Aut(H) is a group homomorphism. Now we summarize some literature survey related to the presentation of groups. -
The General Linear Group
18.704 Gabe Cunningham 2/18/05 [email protected] The General Linear Group Definition: Let F be a field. Then the general linear group GLn(F ) is the group of invert- ible n × n matrices with entries in F under matrix multiplication. It is easy to see that GLn(F ) is, in fact, a group: matrix multiplication is associative; the identity element is In, the n × n matrix with 1’s along the main diagonal and 0’s everywhere else; and the matrices are invertible by choice. It’s not immediately clear whether GLn(F ) has infinitely many elements when F does. However, such is the case. Let a ∈ F , a 6= 0. −1 Then a · In is an invertible n × n matrix with inverse a · In. In fact, the set of all such × matrices forms a subgroup of GLn(F ) that is isomorphic to F = F \{0}. It is clear that if F is a finite field, then GLn(F ) has only finitely many elements. An interesting question to ask is how many elements it has. Before addressing that question fully, let’s look at some examples. ∼ × Example 1: Let n = 1. Then GLn(Fq) = Fq , which has q − 1 elements. a b Example 2: Let n = 2; let M = ( c d ). Then for M to be invertible, it is necessary and sufficient that ad 6= bc. If a, b, c, and d are all nonzero, then we can fix a, b, and c arbitrarily, and d can be anything but a−1bc. This gives us (q − 1)3(q − 2) matrices. -
On the Discrete Logarithm Problem in Finite Fields of Fixed Characteristic
On the discrete logarithm problem in finite fields of fixed characteristic Robert Granger1⋆, Thorsten Kleinjung2⋆⋆, and Jens Zumbr¨agel1⋆ ⋆ ⋆ 1 Laboratory for Cryptologic Algorithms School of Computer and Communication Sciences Ecole´ polytechnique f´ed´erale de Lausanne, Switzerland 2 Institute of Mathematics, Universit¨at Leipzig, Germany {robert.granger,thorsten.kleinjung,jens.zumbragel}@epfl.ch Abstract. × For q a prime power, the discrete logarithm problem (DLP) in Fq consists in finding, for × x any g ∈ Fq and h ∈hgi, an integer x such that g = h. For each prime p we exhibit infinitely many n × extension fields Fp for which the DLP in Fpn can be solved in expected quasi-polynomial time. 1 Introduction In this paper we prove the following result. Theorem 1. For every prime p there exist infinitely many explicit extension fields Fpn for which × the DLP in Fpn can be solved in expected quasi-polynomial time exp (1/ log2+ o(1))(log n)2 . (1) Theorem 1 is an easy corollary of the following much stronger result, which we prove by presenting a randomised algorithm for solving any such DLP. Theorem 2. Given a prime power q > 61 that is not a power of 4, an integer k ≥ 18, polyno- q mials h0, h1 ∈ Fqk [X] of degree at most two and an irreducible degree l factor I of h1X − h0, × ∼ the DLP in Fqkl where Fqkl = Fqk [X]/(I) can be solved in expected time qlog2 l+O(k). (2) To deduce Theorem 1 from Theorem 2, note that thanks to Kummer theory, when l = q − 1 q−1 such h0, h1 are known to exist; indeed, for all k there exists an a ∈ Fqk such that I = X −a ∈ q i Fqk [X] is irreducible and therefore I | X − aX. -
Combination of Cubic and Quartic Plane Curve
IOSR Journal of Mathematics (IOSR-JM) e-ISSN: 2278-5728,p-ISSN: 2319-765X, Volume 6, Issue 2 (Mar. - Apr. 2013), PP 43-53 www.iosrjournals.org Combination of Cubic and Quartic Plane Curve C.Dayanithi Research Scholar, Cmj University, Megalaya Abstract The set of complex eigenvalues of unistochastic matrices of order three forms a deltoid. A cross-section of the set of unistochastic matrices of order three forms a deltoid. The set of possible traces of unitary matrices belonging to the group SU(3) forms a deltoid. The intersection of two deltoids parametrizes a family of Complex Hadamard matrices of order six. The set of all Simson lines of given triangle, form an envelope in the shape of a deltoid. This is known as the Steiner deltoid or Steiner's hypocycloid after Jakob Steiner who described the shape and symmetry of the curve in 1856. The envelope of the area bisectors of a triangle is a deltoid (in the broader sense defined above) with vertices at the midpoints of the medians. The sides of the deltoid are arcs of hyperbolas that are asymptotic to the triangle's sides. I. Introduction Various combinations of coefficients in the above equation give rise to various important families of curves as listed below. 1. Bicorn curve 2. Klein quartic 3. Bullet-nose curve 4. Lemniscate of Bernoulli 5. Cartesian oval 6. Lemniscate of Gerono 7. Cassini oval 8. Lüroth quartic 9. Deltoid curve 10. Spiric section 11. Hippopede 12. Toric section 13. Kampyle of Eudoxus 14. Trott curve II. Bicorn curve In geometry, the bicorn, also known as a cocked hat curve due to its resemblance to a bicorne, is a rational quartic curve defined by the equation It has two cusps and is symmetric about the y-axis. -
A Second Course in Algebraic Number Theory
A second course in Algebraic Number Theory Vlad Dockchitser Prerequisites: • Galois Theory • Representation Theory Overview: ∗ 1. Number Fields (Review, K; OK ; O ; ClK ; etc) 2. Decomposition of primes (how primes behave in eld extensions and what does Galois's do) 3. L-series (Dirichlet's Theorem on primes in arithmetic progression, Artin L-functions, Cheboterev's density theorem) 1 Number Fields 1.1 Rings of integers Denition 1.1. A number eld is a nite extension of Q Denition 1.2. An algebraic integer α is an algebraic number that satises a monic polynomial with integer coecients Denition 1.3. Let K be a number eld. It's ring of integer OK consists of the elements of K which are algebraic integers Proposition 1.4. 1. OK is a (Noetherian) Ring 2. , i.e., ∼ [K:Q] as an abelian group rkZ OK = [K : Q] OK = Z 3. Each can be written as with and α 2 K α = β=n β 2 OK n 2 Z Example. K OK Q Z ( p p [ a] a ≡ 2; 3 mod 4 ( , square free) Z p Q( a) a 2 Z n f0; 1g a 1+ a Z[ 2 ] a ≡ 1 mod 4 where is a primitive th root of unity Q(ζn) ζn n Z[ζn] Proposition 1.5. 1. OK is the maximal subring of K which is nitely generated as an abelian group 2. O`K is integrally closed - if f 2 OK [x] is monic and f(α) = 0 for some α 2 K, then α 2 OK . Example (Of Factorisation). -
Elliptic Curve Arithmetic for Cryptography
Elliptic Curve Arithmetic for Cryptography Srinivasa Rao Subramanya Rao August 2017 A Thesis submitted for the degree of Doctor of Philosophy of The Australian National University c Copyright by Srinivasa Rao Subramanya Rao 2017 All Rights Reserved Declaration I confirm that this thesis is a result of my own work, except as cited in the references. I also confirm that I have not previously submitted any part of this work for the purposes of an award of any degree or diploma from any University. Srinivasa Rao Subramanya Rao March 2017. Previously Published Content During the course of research contributing to this thesis, the following papers were published by the author of this thesis. This PhD thesis contains material from these papers: 1. Srinivasa Rao Subramanya Rao, A Note on Schoenmakers Algorithm for Multi Exponentiation, 12th International Conference on Security and Cryptography (Colmar, France), Proceedings of SECRYPT 2015, pages 384-391. 2. Srinivasa Rao Subramanya Rao, Interesting Results Arising from Karatsuba Multiplication - Montgomery family of formulae, in Proceedings of Sixth International Conference on Computer and Communication Technology 2015 (Allahabad, India), pages 317-322. 3. Srinivasa Rao Subramanya Rao, Three Dimensional Montgomery Ladder, Differential Point Tripling on Montgomery Curves and Point Quintupling on Weierstrass' and Edwards Curves, 8th International Conference on Cryptology in Africa, Proceedings of AFRICACRYPT 2016, (Fes, Morocco), LNCS 9646, Springer, pages 84-106. 4. Srinivasa Rao Subramanya Rao, Differential Addition in Edwards Coordinates Revisited and a Short Note on Doubling in Twisted Edwards Form, 13th International Conference on Security and Cryptography (Lisbon, Portugal), Proceedings of SECRYPT 2016, pages 336-343 and 5. -
Factoring Polynomials Over Finite Fields
Factoring Polynomials over Finite Fields More precisely: Factoring and testing irreduciblity of sparse polynomials over small finite fields Richard P. Brent MSI, ANU joint work with Paul Zimmermann INRIA, Nancy 27 August 2009 Richard Brent (ANU) Factoring Polynomials over Finite Fields 27 August 2009 1 / 64 Outline Introduction I Polynomials over finite fields I Irreducible and primitive polynomials I Mersenne primes Part 1: Testing irreducibility I Irreducibility criteria I Modular composition I Three algorithms I Comparison of the algorithms I The “best” algorithm I Some computational results Part 2: Factoring polynomials I Distinct degree factorization I Avoiding GCDs, blocking I Another level of blocking I Average-case complexity I New primitive trinomials Richard Brent (ANU) Factoring Polynomials over Finite Fields 27 August 2009 2 / 64 Polynomials over finite fields We consider univariate polynomials P(x) over a finite field F. The algorithms apply, with minor changes, for any small positive characteristic, but since time is limited we assume that the characteristic is two, and F = Z=2Z = GF(2). P(x) is irreducible if it has no nontrivial factors. If P(x) is irreducible of degree r, then [Gauss] r x2 = x mod P(x): 2r Thus P(x) divides the polynomial Pr (x) = x − x. In fact, Pr (x) is the product of all irreducible polynomials of degree d, where d runs over the divisors of r. Richard Brent (ANU) Factoring Polynomials over Finite Fields 27 August 2009 3 / 64 Counting irreducible polynomials Let N(d) be the number of irreducible polynomials of degree d. Thus X r dN(d) = deg(Pr ) = 2 : djr By Möbius inversion we see that X rN(r) = µ(d)2r=d : djr Thus, the number of irreducible polynomials of degree r is ! 2r 2r=2 N(r) = + O : r r Since there are 2r polynomials of degree r, the probability that a randomly selected polynomial is irreducible is ∼ 1=r ! 0 as r ! +1. -
Polynomial Curves and Surfaces
Polynomial Curves and Surfaces Chandrajit Bajaj and Andrew Gillette September 8, 2010 Contents 1 What is an Algebraic Curve or Surface? 2 1.1 Algebraic Curves . .3 1.2 Algebraic Surfaces . .3 2 Singularities and Extreme Points 4 2.1 Singularities and Genus . .4 2.2 Parameterizing with a Pencil of Lines . .6 2.3 Parameterizing with a Pencil of Curves . .7 2.4 Algebraic Space Curves . .8 2.5 Faithful Parameterizations . .9 3 Triangulation and Display 10 4 Polynomial and Power Basis 10 5 Power Series and Puiseux Expansions 11 5.1 Weierstrass Factorization . 11 5.2 Hensel Lifting . 11 6 Derivatives, Tangents, Curvatures 12 6.1 Curvature Computations . 12 6.1.1 Curvature Formulas . 12 6.1.2 Derivation . 13 7 Converting Between Implicit and Parametric Forms 20 7.1 Parameterization of Curves . 21 7.1.1 Parameterizing with lines . 24 7.1.2 Parameterizing with Higher Degree Curves . 26 7.1.3 Parameterization of conic, cubic plane curves . 30 7.2 Parameterization of Algebraic Space Curves . 30 7.3 Automatic Parametrization of Degree 2 Curves and Surfaces . 33 7.3.1 Conics . 34 7.3.2 Rational Fields . 36 7.4 Automatic Parametrization of Degree 3 Curves and Surfaces . 37 7.4.1 Cubics . 38 7.4.2 Cubicoids . 40 7.5 Parameterizations of Real Cubic Surfaces . 42 7.5.1 Real and Rational Points on Cubic Surfaces . 44 7.5.2 Algebraic Reduction . 45 1 7.5.3 Parameterizations without Real Skew Lines . 49 7.5.4 Classification and Straight Lines from Parametric Equations . 52 7.5.5 Parameterization of general algebraic plane curves by A-splines . -
Ring (Mathematics) 1 Ring (Mathematics)
Ring (mathematics) 1 Ring (mathematics) In mathematics, a ring is an algebraic structure consisting of a set together with two binary operations usually called addition and multiplication, where the set is an abelian group under addition (called the additive group of the ring) and a monoid under multiplication such that multiplication distributes over addition.a[›] In other words the ring axioms require that addition is commutative, addition and multiplication are associative, multiplication distributes over addition, each element in the set has an additive inverse, and there exists an additive identity. One of the most common examples of a ring is the set of integers endowed with its natural operations of addition and multiplication. Certain variations of the definition of a ring are sometimes employed, and these are outlined later in the article. Polynomials, represented here by curves, form a ring under addition The branch of mathematics that studies rings is known and multiplication. as ring theory. Ring theorists study properties common to both familiar mathematical structures such as integers and polynomials, and to the many less well-known mathematical structures that also satisfy the axioms of ring theory. The ubiquity of rings makes them a central organizing principle of contemporary mathematics.[1] Ring theory may be used to understand fundamental physical laws, such as those underlying special relativity and symmetry phenomena in molecular chemistry. The concept of a ring first arose from attempts to prove Fermat's last theorem, starting with Richard Dedekind in the 1880s. After contributions from other fields, mainly number theory, the ring notion was generalized and firmly established during the 1920s by Emmy Noether and Wolfgang Krull.[2] Modern ring theory—a very active mathematical discipline—studies rings in their own right. -
Construction of Rational Surfaces of Degree 12 in Projective Fourspace
Construction of Rational Surfaces of Degree 12 in Projective Fourspace Hirotachi Abo Abstract The aim of this paper is to present two different constructions of smooth rational surfaces in projective fourspace with degree 12 and sectional genus 13. In particular, we establish the existences of five different families of smooth rational surfaces in projective fourspace with the prescribed invariants. 1 Introduction Hartshone conjectured that only finitely many components of the Hilbert scheme of surfaces in P4 contain smooth rational surfaces. In 1989, this conjecture was positively solved by Ellingsrud and Peskine [7]. The exact bound for the degree is, however, still open, and hence the question concerning the exact bound motivates us to find smooth rational surfaces in P4. The goal of this paper is to construct five different families of smooth rational surfaces in P4 with degree 12 and sectional genus 13. The rational surfaces in P4 were previously known up to degree 11. In this paper, we present two different constructions of smooth rational surfaces in P4 with the given invariants. Both the constructions are based on the technique of “Beilinson monad”. Let V be a finite-dimensional vector space over a field K and let W be its dual space. The basic idea behind a Beilinson monad is to represent a given coherent sheaf on P(W ) as a homology of a finite complex whose objects are direct sums of bundles of differentials. The differentials in the monad are given by homogeneous matrices over an exterior algebra E = V V . To construct a Beilinson monad for a given coherent sheaf, we typically take the following steps: Determine the type of the Beilinson monad, that is, determine each object, and then find differentials in the monad. -
A Brief Note on the Approach to the Conic Sections of a Right Circular Cone from Dynamic Geometry
View metadata, citation and similar papers at core.ac.uk brought to you by CORE provided by EPrints Complutense A brief note on the approach to the conic sections of a right circular cone from dynamic geometry Eugenio Roanes–Lozano Abstract. Nowadays there are different powerful 3D dynamic geometry systems (DGS) such as GeoGebra 5, Calques 3D and Cabri Geometry 3D. An obvious application of this software that has been addressed by several authors is obtaining the conic sections of a right circular cone: the dynamic capabilities of 3D DGS allows to slowly vary the angle of the plane w.r.t. the axis of the cone, thus obtaining the different types of conics. In all the approaches we have found, a cone is firstly constructed and it is cut through variable planes. We propose to perform the construction the other way round: the plane is fixed (in fact it is a very convenient plane: z = 0) and the cone is the moving object. This way the conic is expressed as a function of x and y (instead of as a function of x, y and z). Moreover, if the 3D DGS has algebraic capabilities, it is possible to obtain the implicit equation of the conic. Mathematics Subject Classification (2010). Primary 68U99; Secondary 97G40; Tertiary 68U05. Keywords. Conics, Dynamic Geometry, 3D Geometry, Computer Algebra. 1. Introduction Nowadays there are different powerful 3D dynamic geometry systems (DGS) such as GeoGebra 5 [2], Calques 3D [7, 10] and Cabri Geometry 3D [11]. Focusing on the most widespread one (GeoGebra 5) and conics, there is a “conics” icon in the ToolBar.