MATH 404: ARITHMETIC 1. Divisibility and Factorization After Learning To
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
An Analysis of Primality Testing and Its Use in Cryptographic Applications
An Analysis of Primality Testing and Its Use in Cryptographic Applications Jake Massimo Thesis submitted to the University of London for the degree of Doctor of Philosophy Information Security Group Department of Information Security Royal Holloway, University of London 2020 Declaration These doctoral studies were conducted under the supervision of Prof. Kenneth G. Paterson. The work presented in this thesis is the result of original research carried out by myself, in collaboration with others, whilst enrolled in the Department of Mathe- matics as a candidate for the degree of Doctor of Philosophy. This work has not been submitted for any other degree or award in any other university or educational establishment. Jake Massimo April, 2020 2 Abstract Due to their fundamental utility within cryptography, prime numbers must be easy to both recognise and generate. For this, we depend upon primality testing. Both used as a tool to validate prime parameters, or as part of the algorithm used to generate random prime numbers, primality tests are found near universally within a cryptographer's tool-kit. In this thesis, we study in depth primality tests and their use in cryptographic applications. We first provide a systematic analysis of the implementation landscape of primality testing within cryptographic libraries and mathematical software. We then demon- strate how these tests perform under adversarial conditions, where the numbers being tested are not generated randomly, but instead by a possibly malicious party. We show that many of the libraries studied provide primality tests that are not pre- pared for testing on adversarial input, and therefore can declare composite numbers as being prime with a high probability. -
6. PID and UFD Let R Be a Commutative Ring. Recall That a Non-Unit X ∈ R Is Called Irreducible If X Cannot Be Written As A
6. PID and UFD Let R be a commutative ring. Recall that a non-unit x R is called irreducible if x cannot be written as a product of two non-unit elements of R i.e.∈x = ab implies either a is an unit or b is an unit. Also recall that a domain R is called a principal ideal domain or a PID if every ideal in R can be generated by one element, i.e. is principal. 6.1. Lemma. (a) Let R be a commutative domain. Then prime elements in R are irreducible. (b) Let R be a PID. Then an irreducible in R is a prime element. Proof. (a) Let (p) be a prime ideal in R. If possible suppose p = uv.Thenuv (p), so either u (p)orv (p), if u (p), then u = cp,socv = 1, that is v is an unit. Similarly,∈ if v (p), then∈ u is an∈ unit. ∈ ∈(b) Let p R be irreducible. Suppose ab (p). Since R is a PID, the ideal (a, p)hasa generator, say∈ x, that is, (x)=(a, p). Then ∈p (x), so p = xu for some u R. Since p is irreducible, either u or x must be an unit and we∈ consider these two cases seperately:∈ In the first case, when u is an unit, then x = u−1p,soa (x) (p), that is, p divides a.Inthe second case, when x is a unit, then (a, p)=(1).So(∈ ab,⊆ pb)=(b). But (ab, pb) (p). So (b) (p), that is p divides b. -
Factorization in the Self-Idealization of a Pid 3
FACTORIZATION IN THE SELF-IDEALIZATION OF A PID GYU WHAN CHANG AND DANIEL SMERTNIG a b Abstract. Let D be a principal ideal domain and R(D) = { | 0 a a, b ∈ D} be its self-idealization. It is known that R(D) is a commutative noetherian ring with identity, and hence R(D) is atomic (i.e., every nonzero nonunit can be written as a finite product of irreducible elements). In this paper, we completely characterize the irreducible elements of R(D). We then use this result to show how to factorize each nonzero nonunit of R(D) into irreducible elements. We show that every irreducible element of R(D) is a primary element, and we determine the system of sets of lengths of R(D). 1. Introduction Let R be a commutative noetherian ring. Then R is atomic, which means that every nonzero nonunit element of R can be written as a finite product of atoms (irreducible elements) of R. The study of non-unique factorizations has found a lot of attention. Indeed this area has developed into a flourishing branch of Commutative Algebra (see some surveys and books [3, 6, 8, 5]). However, the focus so far was almost entirely on commutative integral domains, and only first steps were done to study factorization properties in rings with zero-divisors (see [2, 7]). In the present note we study factorizations in a subring of a matrix ring over a principal ideal domain, which will turn out to be a commutative noetherian ring with zero-divisors. To begin with, we fix our notation and terminology. -
Factorization in Domains
Factors Primes and Irreducibles Factorization Ascending Chain Conditions Factorization in Domains Ryan C. Daileda Trinity University Modern Algebra II Daileda Factorization Factors Primes and Irreducibles Factorization Ascending Chain Conditions Divisibility and Factors Recall: Given a domain D and a; b 2 D, ajb , (9c 2 D)(b = ac); and we say a divides b or a is a factor of b. In terms of principal ideals: ajb , (b) ⊂ (a) u 2 D× , (u) = D , (8a 2 D)(uja) ajb and bja , (a) = (b) , (9u 2 D×)(a = bu) | {z } a;b are associates Daileda Factorization Factors Primes and Irreducibles Factorization Ascending Chain Conditions Examples 1 7j35 in Z since 35 = 7 · 5. 2 2 + 3i divides 13 in Z[i] since 13 = (2 + 3i)(2 − 3i). 3 If F is a field, a 2 F and f (X ) 2 F [X ] then f (a) = 0 , X − a divides f (X ) in F [X ]: p p 4 In Z[ −5], 2 + −5 is a factor of 9: p p 9 = (2 + −5)(2 − −5): Daileda Factorization Factors Primes and Irreducibles Factorization Ascending Chain Conditions Prime and Irreducible Elements Let D be a domain and D_ = D n (D× [ f0g). Motivated by arithmetic in Z, we make the following definitions. a 2 D_ is irreducible (or atomic) if a = bc with b; c 2 D implies b 2 D× or c 2 D×; a 2 D_ is prime if ajbc in D implies ajb or ajc. We will prefer \irreducible," but \atomic" is also common in the literature. Daileda Factorization Factors Primes and Irreducibles Factorization Ascending Chain Conditions Remarks 1 p 2 Z is \prime" in the traditional sense if and only if it is irreducible in the ring-theoretic sense. -
GRACEFUL and PRIME LABELINGS -Algorithms, Embeddings and Conjectures
GRACEFUL AND PRIME LABELINGS-Algorithms, Embeddings and Conjectures Group Discussion (KREC, Surathkal: Aug.16-25, 1999). Improved Version. GRACEFUL AND PRIME LABELINGS -Algorithms, Embeddings and Conjectures Suryaprakash Nagoji Rao* Exploration Business Group MRBC, ONGC, Mumbai-400 022 Abstract. Four algorithms giving rise to graceful graphs from a known (non-)graceful graph are described. Some necessary conditions for a graph to be highly graceful and critical are given. Finally some conjectures are made on graceful, critical and highly graceful graphs. The Ringel-Rosa-Kotzig Conjecture is generalized to highly graceful graphs. Mayeda-Seshu Tree Generation Algorithm is modified to generate all possible graceful labelings of trees of order p. An alternative algorithm in terms of integers modulo p is described which includes all possible graceful labelings of trees of order p and some interesting properties are observed. Optimal and graceful graph embeddings (not necessarily connected) are given. Alternative proofs for embedding a graph into a graceful graph as a subgraph and as an induced subgraph are included. An algorithm to obtain an optimal graceful embedding is described. A necessary condition for a graph to be supergraceful is given. As a consequence some classes of non-supergraceful graphs are obtained. Embedding problems of a graph into a supergraceful graph are studied. A catalogue of super graceful graphs with at most five nodes is appended. Optimal graceful and supergraceful embeddings of a graph are given. Graph theoretical properties of prime and superprime graphs are listed. Good upper bound for minimum number of edges in a nonprime graph is given and some conjectures are proposed which in particular includes Entringer’s prime tree conjecture. -
NOTES on UNIQUE FACTORIZATION DOMAINS Alfonso Gracia-Saz, MAT 347
Unique-factorization domains MAT 347 NOTES ON UNIQUE FACTORIZATION DOMAINS Alfonso Gracia-Saz, MAT 347 Note: These notes summarize the approach I will take to Chapter 8. You are welcome to read Chapter 8 in the book instead, which simply uses a different order, and goes in slightly different depth at different points. If you read the book, notice that I will skip any references to universal side divisors and Dedekind-Hasse norms. If you find any typos or mistakes, please let me know. These notes complement, but do not replace lectures. Last updated on January 21, 2016. Note 1. Through this paper, we will assume that all our rings are integral domains. R will always denote an integral domains, even if we don't say it each time. Motivation: We know that every integer number is the product of prime numbers in a unique way. Sort of. We just believed our kindergarden teacher when she told us, and we omitted the fact that it needed to be proven. We want to prove that this is true, that something similar is true in the ring of polynomials over a field. More generally, in which domains is this true? In which domains does this fail? 1 Unique-factorization domains In this section we want to define what it means that \every" element can be written as product of \primes" in a \unique" way (as we normally think of the integers), and we want to see some examples where this fails. It will take us a few definitions. Definition 2. Let a; b 2 R. -
Algebraic Number Theory Summary of Notes
Algebraic Number Theory summary of notes Robin Chapman 3 May 2000, revised 28 March 2004, corrected 4 January 2005 This is a summary of the 1999–2000 course on algebraic number the- ory. Proofs will generally be sketched rather than presented in detail. Also, examples will be very thin on the ground. I first learnt algebraic number theory from Stewart and Tall’s textbook Algebraic Number Theory (Chapman & Hall, 1979) (latest edition retitled Algebraic Number Theory and Fermat’s Last Theorem (A. K. Peters, 2002)) and these notes owe much to this book. I am indebted to Artur Costa Steiner for pointing out an error in an earlier version. 1 Algebraic numbers and integers We say that α ∈ C is an algebraic number if f(α) = 0 for some monic polynomial f ∈ Q[X]. We say that β ∈ C is an algebraic integer if g(α) = 0 for some monic polynomial g ∈ Z[X]. We let A and B denote the sets of algebraic numbers and algebraic integers respectively. Clearly B ⊆ A, Z ⊆ B and Q ⊆ A. Lemma 1.1 Let α ∈ A. Then there is β ∈ B and a nonzero m ∈ Z with α = β/m. Proof There is a monic polynomial f ∈ Q[X] with f(α) = 0. Let m be the product of the denominators of the coefficients of f. Then g = mf ∈ Z[X]. Pn j Write g = j=0 ajX . Then an = m. Now n n−1 X n−1+j j h(X) = m g(X/m) = m ajX j=0 1 is monic with integer coefficients (the only slightly problematical coefficient n −1 n−1 is that of X which equals m Am = 1). -
RING THEORY 1. Ring Theory a Ring Is a Set a with Two Binary Operations
CHAPTER IV RING THEORY 1. Ring Theory A ring is a set A with two binary operations satisfying the rules given below. Usually one binary operation is denoted `+' and called \addition," and the other is denoted by juxtaposition and is called \multiplication." The rules required of these operations are: 1) A is an abelian group under the operation + (identity denoted 0 and inverse of x denoted x); 2) A is a monoid under the operation of multiplication (i.e., multiplication is associative and there− is a two-sided identity usually denoted 1); 3) the distributive laws (x + y)z = xy + xz x(y + z)=xy + xz hold for all x, y,andz A. Sometimes one does∈ not require that a ring have a multiplicative identity. The word ring may also be used for a system satisfying just conditions (1) and (3) (i.e., where the associative law for multiplication may fail and for which there is no multiplicative identity.) Lie rings are examples of non-associative rings without identities. Almost all interesting associative rings do have identities. If 1 = 0, then the ring consists of one element 0; otherwise 1 = 0. In many theorems, it is necessary to specify that rings under consideration are not trivial, i.e. that 1 6= 0, but often that hypothesis will not be stated explicitly. 6 If the multiplicative operation is commutative, we call the ring commutative. Commutative Algebra is the study of commutative rings and related structures. It is closely related to algebraic number theory and algebraic geometry. If A is a ring, an element x A is called a unit if it has a two-sided inverse y, i.e. -
13 Lectures on Fermat's Last Theorem
I Paulo Ribenboim 13 Lectures on Fermat's Last Theorem Pierre de Fermat 1608-1665 Springer-Verlag New York Heidelberg Berlin Paulo Ribenboim Department of Mathematics and Statistics Jeffery Hall Queen's University Kingston Canada K7L 3N6 Hommage a AndrC Weil pour sa Leqon: goat, rigueur et pCnCtration. AMS Subiect Classifications (1980): 10-03, 12-03, 12Axx Library of Congress Cataloguing in Publication Data Ribenboim, Paulo. 13 lectures on Fermat's last theorem. Includes bibliographies and indexes. 1. Fermat's theorem. I. Title. QA244.R5 512'.74 79-14874 All rights reserved. No part of this book may be translated or reproduced in any form without written permission from Springer-Verlag. @ 1979 by Springer-Verlag New York Inc. Printed in the United States of America. 987654321 ISBN 0-387-90432-8 Springer-Verlag New York ISBN 3-540-90432-8 Springer-Verlag Berlin Heidelberg Preface Fermat's problem, also called Fermat's last theorem, has attracted the attention of mathematicians for more than three centuries. Many clever methods have been devised to attack the problem, and many beautiful theories have been created with the aim of proving the theorem. Yet, despite all the attempts, the question remains unanswered. The topic is presented in the form of lectures, where I survey the main lines of work on the problem. In the first two lectures, there is a very brief description of the early history, as well as a selection of a few of the more representative recent results. In the lectures which follow, I examine in suc- cession the main theories connected with the problem. -
Section III.3. Factorization in Commutative Rings
III.3. Factorization in Commutative Rings 1 Section III.3. Factorization in Commutative Rings Note. In this section, we introduce the concepts of divisibility, irreducibility, and prime elements in a ring. We define a unique factorization domain and show that every principal ideal domain is one (“every PID is a UFD”—Theorem III.3.7). We push the Fundamental Theorem of Arithmetic and the Division Algorithm to new settings. Definition III.3.1. A nonzero element a of commutative ring R divides an element b R (denoted a b) if there exists x R such that ax = b. Elements a,b R are ∈ | ∈ ∈ associates if a b and b a. | | Theorem III.3.2. Let a,b,u be elements of a commutative ring R with identity. (i) a b if and only if (b) (a). | ⊂ (ii) a and b are associates if and only if (a)=(b). (iii) u is a unit if and only if u r for all r R. | ∈ (iv) u is a unit if and only if (u)= R. (v) The relation “a is an associate of b” is an equivalence relation on R. (vi) If a = br with r R a unit, then a and b are associates. If R is an integral ∈ domain, the converse is true. Proof. Exercise. III.3. Factorization in Commutative Rings 2 Definition III.3.3. Let R be a commutative ring with identity. An element c R ∈ is irreducible provided that: (i) c is a nonzero nonunit, and (ii) c = ab implies that either a is a unit or b is a unit. -
Algebraic Number Theory
Algebraic Number Theory J.S. Milne Version 3.00 February 11, 2008 An algebraic number field is a finite extension of Q; an algebraic number is an element of an algebraic number field. Algebraic number theory studies the arithmetic of algebraic number fields — the ring of integers in the number field, the ideals and units in the ring of integers, the extent to which unique factorization holds, and so on. An abelian extension of a field is a Galois extension of the field with abelian Galois group. Class field theory describes the abelian extensions of a number field in terms of the arithmetic of the field. These notes are concerned with algebraic number theory, and the sequel with class field theory. The original version was distributed during the teaching of a second-year graduate course. BibTeX information @misc{milneANT, author={Milne, James S.}, title={Algebraic Number Theory (v3.00)}, year={2008}, note={Available at www.jmilne.org/math/}, pages={155+viii} } v2.01 (August 14, 1996). First version on the web. v2.10 (August 31, 1998). Fixed many minor errors; added exercises and an index; 138 pages. v3.00 (February 11, 2008). Corrected; revisions and additions; 163 pages. Available at www.jmilne.org/math/ Please send comments and corrections to me at the address on my web page. The photograph is of the Fork Hut, Huxley Valley, New Zealand. Copyright c 1996, 1998, 2008, J.S. Milne. Single paper copies for noncommercial personal use may be made without explicit permis- sion from the copyright holder. Contents Contents 2 Notations. 5 Prerequisites . -
A Performant, Misuse-Resistant API for Primality Testing
A Performant, Misuse-Resistant API for Primality Testing Jake Massimo1 and Kenneth G. Paterson2 1 Information Security Group, Royal Holloway, University of London [email protected] 2 Department of Computer Science, ETH Zurich [email protected] Abstract. Primality testing is a basic cryptographic task. But developers today are faced with complex APIs for primality testing, along with documentation that fails to clearly state the reliability of the tests being performed. This leads to the APIs being incorrectly used in practice, with potentially disastrous consequences. In an effort to overcome this, we present a primality test having a simplest-possible API: the test accepts a number to be tested and returns a Boolean indicating whether the input was composite or probably prime. For all inputs, the output is guaranteed to be correct with probability at least 1 − 2−128. The test is performant: on random, odd, 1024-bit inputs, it is faster than the default test used in OpenSSL by 17%. We investigate the impact of our new test on the cost of random prime generation, a key use case for primality testing. The OpenSSL developers have adopted our suggestions in full; our new API and primality test are scheduled for release in OpenSSL 3.0. 1 Introduction Primality testing, and closely related tasks like random prime generation and testing of Diffie-Hellman parameters, are core cryptographic tasks. Primality testing is by now very well understood mathematically; there is a clear distinction between accuracy and running time of different tests in settings that are malicious (i.e.