On Some Polynomial-Time Primality Algorithms (Alcuni Algoritmi Polinomiali Di Primalita)`
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
Simultaneous Elements of Prescribed Multiplicative Orders 2
Simultaneous Elements Of Prescribed Multiplicative Orders N. A. Carella Abstract: Let u 6= ±1, and v 6= ±1 be a pair of fixed relatively prime squarefree integers, and let d ≥ 1, and e ≥ 1 be a pair of fixed integers. It is shown that there are infinitely many primes p ≥ 2 such that u and v have simultaneous prescribed multiplicative orders ordp u = (p − 1)/d and ordp v = (p − 1)/e respectively, unconditionally. In particular, a squarefree odd integer u > 2 and v = 2 are simultaneous primitive roots and quadratic residues (or quadratic nonresidues) modulo p for infinitely many primes p, unconditionally. Contents 1 Introduction 1 2 Divisors Free Characteristic Function 4 3 Finite Summation Kernels 5 4 Gaussian Sums, And Weil Sums 7 5 Incomplete And Complete Exponential Sums 7 6 Explicit Exponential Sums 11 7 Equivalent Exponential Sums 12 8 Double Exponential Sums 13 9 The Main Term 14 10 The Error Terms 15 arXiv:2103.04822v1 [math.GM] 5 Mar 2021 11 Simultaneous Prescribed Multiplicative Orders 16 12 Probabilistic Results For Simultaneous Orders 18 1 Introduction The earliest study of admissible integers k-tuples u1, u2, . , uk ∈ Z of simultaneous prim- itive roots modulo a prime p seems to be the conditional result in [21]. Much more general March 9, 2021 AMS MSC2020 :Primary 11A07; Secondary 11N13 Keywords: Distribution of primes; Primes in arithmetic progressions; Simultaneous primitive roots; Simul- taneous prescribed orders; Schinzel-Wojcik problem. 1 Simultaneous Elements Of Prescribed Multiplicative Orders 2 results for admissible rationals k-tuples u1, u2, . , uk ∈ Q of simultaneous elements of independent (or pseudo independent) multiplicative orders modulo a prime p ≥ 2 are considered in [26], and [14]. -
Fast Generation of RSA Keys Using Smooth Integers
1 Fast Generation of RSA Keys using Smooth Integers Vassil Dimitrov, Luigi Vigneri and Vidal Attias Abstract—Primality generation is the cornerstone of several essential cryptographic systems. The problem has been a subject of deep investigations, but there is still a substantial room for improvements. Typically, the algorithms used have two parts – trial divisions aimed at eliminating numbers with small prime factors and primality tests based on an easy-to-compute statement that is valid for primes and invalid for composites. In this paper, we will showcase a technique that will eliminate the first phase of the primality testing algorithms. The computational simulations show a reduction of the primality generation time by about 30% in the case of 1024-bit RSA key pairs. This can be particularly beneficial in the case of decentralized environments for shared RSA keys as the initial trial division part of the key generation algorithms can be avoided at no cost. This also significantly reduces the communication complexity. Another essential contribution of the paper is the introduction of a new one-way function that is computationally simpler than the existing ones used in public-key cryptography. This function can be used to create new random number generators, and it also could be potentially used for designing entirely new public-key encryption systems. Index Terms—Multiple-base Representations, Public-Key Cryptography, Primality Testing, Computational Number Theory, RSA ✦ 1 INTRODUCTION 1.1 Fast generation of prime numbers DDITIVE number theory is a fascinating area of The generation of prime numbers is a cornerstone of A mathematics. In it one can find problems with cryptographic systems such as the RSA cryptosystem. -
Sieving for Twin Smooth Integers with Solutions to the Prouhet-Tarry-Escott Problem
Sieving for twin smooth integers with solutions to the Prouhet-Tarry-Escott problem Craig Costello1, Michael Meyer2;3, and Michael Naehrig1 1 Microsoft Research, Redmond, WA, USA fcraigco,[email protected] 2 University of Applied Sciences Wiesbaden, Germany 3 University of W¨urzburg,Germany [email protected] Abstract. We give a sieving algorithm for finding pairs of consecutive smooth numbers that utilizes solutions to the Prouhet-Tarry-Escott (PTE) problem. Any such solution induces two degree-n polynomials, a(x) and b(x), that differ by a constant integer C and completely split into linear factors in Z[x]. It follows that for any ` 2 Z such that a(`) ≡ b(`) ≡ 0 mod C, the two integers a(`)=C and b(`)=C differ by 1 and necessarily contain n factors of roughly the same size. For a fixed smoothness bound B, restricting the search to pairs of integers that are parameterized in this way increases the probability that they are B-smooth. Our algorithm combines a simple sieve with parametrizations given by a collection of solutions to the PTE problem. The motivation for finding large twin smooth integers lies in their application to compact isogeny-based post-quantum protocols. The recent key exchange scheme B-SIDH and the recent digital signature scheme SQISign both require large primes that lie between two smooth integers; finding such a prime can be seen as a special case of finding twin smooth integers under the additional stipulation that their sum is a prime p. When searching for cryptographic parameters with 2240 ≤ p < 2256, an implementation of our sieve found primes p where p + 1 and p − 1 are 215-smooth; the smoothest prior parameters had a similar sized prime for which p−1 and p+1 were 219-smooth. -
Computing Multiplicative Order and Primitive Root in Finite Cyclic Group
Computing Multiplicative Order and Primitive Root in Finite Cyclic Group Shri Prakash Dwivedi ∗ Abstract Multiplicative order of an element a of group G is the least positive integer n such that an = e, where e is the identity element of G. If the order of an element is equal to |G|, it is called generator or primitive root. This paper describes the algorithms for computing multiplicative order and Z∗ primitive root in p, we also present a logarithmic improvement over classical algorithms. 1 Introduction Algorithms for computing multiplicative order or simply order and primitive root or generator are important in the area of random number generation and discrete logarithm problem among oth- Z∗ ers. In this paper we consider the problem of computing the order of an element over p, which is Z∗ multiplicative group modulo p . As stated above order of an element a ∈ p is the least positive integer n such that an = 1. In number theoretic language, we say that the order of a modulo m is n, if n is the smallest positive integer such that an ≡ 1( mod m). We also consider the related Z∗ Z∗ problem of computing the primitive root in p. If order of an element a ∈ n usually denoted as Z∗ ordn(a) is equal to | n| i.e. order of multiplicative group modulo n, then a is called called primi- Z∗ tive root or primitive element or generator [3] of n. It is called generator because every element Z∗ in n is some power of a. Efficient deterministic algorithms for both of the above problems are not known yet. -
A Quantum Primality Test with Order Finding
A quantum primality test with order finding Alvaro Donis-Vela1 and Juan Carlos Garcia-Escartin1,2, ∗ 1Universidad de Valladolid, G-FOR: Research Group on Photonics, Quantum Information and Radiation and Scattering of Electromagnetic Waves. o 2Universidad de Valladolid, Dpto. Teor´ıa de la Se˜nal e Ing. Telem´atica, Paseo Bel´en n 15, 47011 Valladolid, Spain (Dated: November 8, 2017) Determining whether a given integer is prime or composite is a basic task in number theory. We present a primality test based on quantum order finding and the converse of Fermat’s theorem. For an integer N, the test tries to find an element of the multiplicative group of integers modulo N with order N − 1. If one is found, the number is known to be prime. During the test, we can also show most of the times N is composite with certainty (and a witness) or, after log log N unsuccessful attempts to find an element of order N − 1, declare it composite with high probability. The algorithm requires O((log n)2n3) operations for a number N with n bits, which can be reduced to O(log log n(log n)3n2) operations in the asymptotic limit if we use fast multiplication. Prime numbers are the fundamental entity in number For a prime N, ϕ(N) = N 1 and we recover Fermat’s theory and play a key role in many of its applications theorem. − such as cryptography. Primality tests are algorithms that If we can find an integer a for which aN−1 1 mod N, determine whether a given integer N is prime or not. -
Exponential and Character Sums with Mersenne Numbers
Exponential and character sums with Mersenne numbers William D. Banks Dept. of Mathematics, University of Missouri Columbia, MO 65211, USA [email protected] John B. Friedlander Dept. of Mathematics, University of Toronto Toronto, Ontario M5S 3G3, Canada [email protected] Moubariz Z. Garaev Instituto de Matem´aticas Universidad Nacional Aut´onoma de M´exico C.P. 58089, Morelia, Michoac´an, M´exico [email protected] Igor E. Shparlinski Dept. of Computing, Macquarie University Sydney, NSW 2109, Australia [email protected] Dedicated to the memory of Alf van der Poorten 1 Abstract We give new bounds on sums of the form Λ(n) exp(2πiagn/m) and Λ(n)χ(gn + a), 6 6 nXN nXN where Λ is the von Mangoldt function, m is a natural number, a and g are integers coprime to m, and χ is a multiplicative character modulo m. In particular, our results yield bounds on the sums exp(2πiaMp/m) and χ(Mp) 6 6 pXN pXN p with Mersenne numbers Mp = 2 − 1, where p is prime. AMS Subject Classification Numbers: 11L07, 11L20. 1 Introduction Let m be an arbitrary natural number, and let a and g be integers that are coprime to m. Our aim in the present note is to give bounds on exponential sums and multiplicative character sums of the form n n Sm(a; N)= Λ(n)em(ag ) and Tm(χ, a; N)= Λ(n)χ(g + a), 6 6 nXN nXN where em is the additive character modulo m defined by em(x) = exp(2πix/m) (x ∈ R), and χ is a nontrivial multiplicative character modulo m. -
Sieving by Large Integers and Covering Systems of Congruences
JOURNAL OF THE AMERICAN MATHEMATICAL SOCIETY Volume 20, Number 2, April 2007, Pages 495–517 S 0894-0347(06)00549-2 Article electronically published on September 19, 2006 SIEVING BY LARGE INTEGERS AND COVERING SYSTEMS OF CONGRUENCES MICHAEL FILASETA, KEVIN FORD, SERGEI KONYAGIN, CARL POMERANCE, AND GANG YU 1. Introduction Notice that every integer n satisfies at least one of the congruences n ≡ 0(mod2),n≡ 0(mod3),n≡ 1(mod4),n≡ 1(mod6),n≡ 11 (mod 12). A finite set of congruences, where each integer satisfies at least one them, is called a covering system. A famous problem of Erd˝os from 1950 [4] is to determine whether for every N there is a covering system with distinct moduli greater than N.In other words, can the minimum modulus in a covering system with distinct moduli be arbitrarily large? In regards to this problem, Erd˝os writes in [6], “This is perhaps my favourite problem.” It is easy to see that in a covering system, the reciprocal sum of the moduli is at least 1. Examples with distinct moduli are known with least modulus 2, 3, and 4, where this reciprocal sum can be arbitrarily close to 1; see [10], §F13. Erd˝os and Selfridge [5] conjectured that this fails for all large enough choices of the least modulus. In fact, they made the following much stronger conjecture. Conjecture 1. For any number B,thereisanumberNB,suchthatinacovering system with distinct moduli greater than NB, the sum of reciprocals of these moduli is greater than B. A version of Conjecture 1 also appears in [7]. -
A Potentially Fast Primality Test
A Potentially Fast Primality Test Tsz-Wo Sze February 20, 2007 1 Introduction In 2002, Agrawal, Kayal and Saxena [3] gave the ¯rst deterministic, polynomial- time primality testing algorithm. The main step was the following. Theorem 1.1. (AKS) Given an integer n > 1, let r be an integer such that 2 ordr(n) > log n. Suppose p (x + a)n ´ xn + a (mod n; xr ¡ 1) for a = 1; ¢ ¢ ¢ ; b Á(r) log nc: (1.1) Then, n has a prime factor · r or n is a prime power. The running time is O(r1:5 log3 n). It can be shown by elementary means that the required r exists in O(log5 n). So the running time is O(log10:5 n). Moreover, by Fouvry's Theorem [8], such r exists in O(log3 n), so the running time becomes O(log7:5 n). In [10], Lenstra and Pomerance showed that the AKS primality test can be improved by replacing the polynomial xr ¡ 1 in equation (1.1) with a specially constructed polynomial f(x), so that the degree of f(x) is O(log2 n). The overall running time of their algorithm is O(log6 n). With an extra input integer a, Berrizbeitia [6] has provided a deterministic primality test with time complexity 2¡ min(k;b2 log log nc)O(log6 n), where 2kjjn¡1 if n ´ 1 (mod 4) and 2kjjn + 1 if n ´ 3 (mod 4). If k ¸ b2 log log nc, this algorithm runs in O(log4 n). The algorithm is also a modi¯cation of AKS by verifying the congruent equation s (1 + mx)n ´ 1 + mxn (mod n; x2 ¡ a) for a ¯xed s and some clever choices of m¡ .¢ The main drawback of this algorithm¡ ¢ is that it requires the Jacobi symbol a = ¡1 if n ´ 1 (mod 4) and a = ¡ ¢ n n 1¡a n = ¡1 if n ´ 3 (mod 4). -
Factoring Integers with a Brain-Inspired Computer John V
IEEE TRANSACTIONS ON CIRCUITS AND SYSTEMS—I: REGULAR PAPERS 1 Factoring Integers with a Brain-Inspired Computer John V. Monaco and Manuel M. Vindiola Abstract—The bound to factor large integers is dominated • Constant-time synaptic integration: a single neuron in the by the computational effort to discover numbers that are B- brain may receive electrical potential inputs along synap- smooth, i.e., integers whose largest prime factor does not exceed tic connections from thousands of other neurons. The B. Smooth numbers are traditionally discovered by sieving a polynomial sequence, whereby the logarithmic sum of prime incoming potentials are continuously and instantaneously factors of each polynomial value is compared to a threshold. integrated to compute the neuron’s membrane potential. On a von Neumann architecture, this requires a large block of Like the brain, neuromorphic architectures aim to per- memory for the sieving interval and frequent memory updates, form synaptic integration in constant time, typically by resulting in O(ln ln B) amortized time complexity to check each leveraging physical properties of the underlying device. value for smoothness. This work presents a neuromorphic sieve that achieves a constant-time check for smoothness by reversing Unlike the traditional CPU-based sieve, the factor base is rep- the roles of space and time from the von Neumann architecture resented in space (as spiking neurons) and the sieving interval and exploiting two characteristic properties of brain-inspired in time (as successive time steps). Sieving is performed by computation: massive parallelism and constant time synaptic integration. The effects on sieving performance of two common a population of leaky integrate-and-fire (LIF) neurons whose neuromorphic architectural constraints are examined: limited dynamics are simple enough to be implemented on a range synaptic weight resolution, which forces the factor base to be of current and future architectures. -
Overpseudoprimes, Mersenne Numbers and Wieferich Primes 2
OVERPSEUDOPRIMES, MERSENNE NUMBERS AND WIEFERICH PRIMES VLADIMIR SHEVELEV Abstract. We introduce a new class of pseudoprimes - so-called “overpseu- doprimes” which is a special subclass of super-Poulet pseudoprimes. De- noting via h(n) the multiplicative order of 2 modulo n, we show that odd number n is overpseudoprime if and only if the value of h(n) is invariant of all divisors d > 1 of n. In particular, we prove that all composite Mersenne numbers 2p − 1, where p is prime, and squares of Wieferich primes are overpseudoprimes. 1. Introduction n Sometimes the numbers Mn =2 − 1, n =1, 2,..., are called Mersenne numbers, although this name is usually reserved for numbers of the form p (1) Mp =2 − 1 where p is prime. In our paper we use the latter name. In this form numbers Mp at the first time were studied by Marin Mersenne (1588-1648) at least in 1644 (see in [1, p.9] and a large bibliography there). We start with the following simple observation. Let n be odd and h(n) denote the multiplicative order of 2 modulo n. arXiv:0806.3412v9 [math.NT] 15 Mar 2012 Theorem 1. Odd d> 1 is a divisor of Mp if and only if h(d)= p. Proof. If d > 1 is a divisor of 2p − 1, then h(d) divides prime p. But h(d) > 1. Thus, h(d)= p. The converse statement is evident. Remark 1. This observation for prime divisors of Mp belongs to Max Alek- seyev ( see his comment to sequence A122094 in [5]). -
On Distribution of Semiprime Numbers
ISSN 1066-369X, Russian Mathematics (Iz. VUZ), 2014, Vol. 58, No. 8, pp. 43–48. c Allerton Press, Inc., 2014. Original Russian Text c Sh.T. Ishmukhametov, F.F. Sharifullina, 2014, published in Izvestiya Vysshikh Uchebnykh Zavedenii. Matematika, 2014, No. 8, pp. 53–59. On Distribution of Semiprime Numbers Sh. T. Ishmukhametov* and F. F. Sharifullina** Kazan (Volga Region) Federal University, ul. Kremlyovskaya 18, Kazan, 420008 Russia Received January 31, 2013 Abstract—A semiprime is a natural number which is the product of two (possibly equal) prime numbers. Let y be a natural number and g(y) be the probability for a number y to be semiprime. In this paper we derive an asymptotic formula to count g(y) for large y and evaluate its correctness for different y. We also introduce strongly semiprimes, i.e., numbers each of which is a product of two primes of large dimension, and investigate distribution of strongly semiprimes. DOI: 10.3103/S1066369X14080052 Keywords: semiprime integer, strongly semiprime, distribution of semiprimes, factorization of integers, the RSA ciphering method. By smoothness of a natural number n we mean possibility of its representation as a product of a large number of prime factors. A B-smooth number is a number all prime divisors of which are bounded from above by B. The concept of smoothness plays an important role in number theory and cryptography. Possibility of using the concept in cryptography is based on the fact that the procedure of decom- position of an integer into prime divisors (factorization) is a laborious computational process requiring significant calculating resources [1, 2]. -
A Set of Sequences in Number Theory
A SET OF SEQUENCES IN NUMBER THEORY by Florentin Smarandache University of New Mexico Gallup, NM 87301, USA Abstract: New sequences are introduced in number theory, and for each one a general question: how many primes each sequence has. Keywords: sequence, symmetry, consecutive, prime, representation of numbers. 1991 MSC: 11A67 Introduction. 74 new integer sequences are defined below, followed by references and some open questions. 1. Consecutive sequence: 1,12,123,1234,12345,123456,1234567,12345678,123456789, 12345678910,1234567891011,123456789101112, 12345678910111213,... How many primes are there among these numbers? In a general form, the Consecutive Sequence is considered in an arbitrary numeration base B. Reference: a) Student Conference, University of Craiova, Department of Mathematics, April 1979, "Some problems in number theory" by Florentin Smarandache. 2. Circular sequence: 1,12,21,123,231,312,1234,2341,3412,4123,12345,23451,34512,45123,51234, | | | | | | | | | --- --------- ----------------- --------------------------- 1 2 3 4 5 123456,234561,345612,456123,561234,612345,1234567,2345671,3456712,... | | | --------------------------------------- ---------------------- ... 6 7 How many primes are there among these numbers? 3. Symmetric sequence: 1,11,121,1221,12321,123321,1234321,12344321,123454321, 1234554321,12345654321,123456654321,1234567654321, 12345677654321,123456787654321,1234567887654321, 12345678987654321,123456789987654321,12345678910987654321, 1234567891010987654321,123456789101110987654321, 12345678910111110987654321,... How many primes are there among these numbers? In a general form, the Symmetric Sequence is considered in an arbitrary numeration base B. References: a) Arizona State University, Hayden Library, "The Florentin Smarandache papers" special collection, Tempe, AZ 85287- 1006, USA. b) Student Conference, University of Craiova, Department of Mathematics, April 1979, "Some problems in number theory" by Florentin Smarandache. 4. Deconstructive sequence: 1,23,456,7891,23456,789123,4567891,23456789,123456789,1234567891, ..