Generalized Fibonacci Primitive Roots 2 Conditional on the Generalized Riemann Hypothesis, Was Established in [11], and [19]
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
An Analysis of Primality Testing and Its Use in Cryptographic Applications
An Analysis of Primality Testing and Its Use in Cryptographic Applications Jake Massimo Thesis submitted to the University of London for the degree of Doctor of Philosophy Information Security Group Department of Information Security Royal Holloway, University of London 2020 Declaration These doctoral studies were conducted under the supervision of Prof. Kenneth G. Paterson. The work presented in this thesis is the result of original research carried out by myself, in collaboration with others, whilst enrolled in the Department of Mathe- matics as a candidate for the degree of Doctor of Philosophy. This work has not been submitted for any other degree or award in any other university or educational establishment. Jake Massimo April, 2020 2 Abstract Due to their fundamental utility within cryptography, prime numbers must be easy to both recognise and generate. For this, we depend upon primality testing. Both used as a tool to validate prime parameters, or as part of the algorithm used to generate random prime numbers, primality tests are found near universally within a cryptographer's tool-kit. In this thesis, we study in depth primality tests and their use in cryptographic applications. We first provide a systematic analysis of the implementation landscape of primality testing within cryptographic libraries and mathematical software. We then demon- strate how these tests perform under adversarial conditions, where the numbers being tested are not generated randomly, but instead by a possibly malicious party. We show that many of the libraries studied provide primality tests that are not pre- pared for testing on adversarial input, and therefore can declare composite numbers as being prime with a high probability. -
FACTORING COMPOSITES TESTING PRIMES Amin Witno
WON Series in Discrete Mathematics and Modern Algebra Volume 3 FACTORING COMPOSITES TESTING PRIMES Amin Witno Preface These notes were used for the lectures in Math 472 (Computational Number Theory) at Philadelphia University, Jordan.1 The module was aborted in 2012, and since then this last edition has been preserved and updated only for minor corrections. Outline notes are more like a revision. No student is expected to fully benefit from these notes unless they have regularly attended the lectures. 1 The RSA Cryptosystem Sensitive messages, when transferred over the internet, need to be encrypted, i.e., changed into a secret code in such a way that only the intended receiver who has the secret key is able to read it. It is common that alphabetical characters are converted to their numerical ASCII equivalents before they are encrypted, hence the coded message will look like integer strings. The RSA algorithm is an encryption-decryption process which is widely employed today. In practice, the encryption key can be made public, and doing so will not risk the security of the system. This feature is a characteristic of the so-called public-key cryptosystem. Ali selects two distinct primes p and q which are very large, over a hundred digits each. He computes n = pq, ϕ = (p − 1)(q − 1), and determines a rather small number e which will serve as the encryption key, making sure that e has no common factor with ϕ. He then chooses another integer d < n satisfying de % ϕ = 1; This d is his decryption key. When all is ready, Ali gives to Beth the pair (n; e) and keeps the rest secret. -
Primality Test
Primality test A primality test is an algorithm for determining whether (6k + i) for some integer k and for i = −1, 0, 1, 2, 3, or 4; an input number is prime. Amongst other fields of 2 divides (6k + 0), (6k + 2), (6k + 4); and 3 divides (6k mathematics, it is used for cryptography. Unlike integer + 3). So a more efficient method is to test if n is divisible factorization, primality tests do not generally give prime by 2 or 3, then to check through all the numbers of form p factors, only stating whether the input number is prime 6k ± 1 ≤ n . This is 3 times as fast as testing all m. or not. Factorization is thought to be a computationally Generalising further, it can be seen that all primes are of difficult problem, whereas primality testing is compara- the form c#k + i for i < c# where i represents the numbers tively easy (its running time is polynomial in the size of that are coprime to c# and where c and k are integers. the input). Some primality tests prove that a number is For example, let c = 6. Then c# = 2 · 3 · 5 = 30. All prime, while others like Miller–Rabin prove that a num- integers are of the form 30k + i for i = 0, 1, 2,...,29 and k ber is composite. Therefore the latter might be called an integer. However, 2 divides 0, 2, 4,...,28 and 3 divides compositeness tests instead of primality tests. 0, 3, 6,...,27 and 5 divides 0, 5, 10,...,25. -
Elementary Number Theory
Elementary Number Theory Peter Hackman HHH Productions November 5, 2007 ii c P Hackman, 2007. Contents Preface ix A Divisibility, Unique Factorization 1 A.I The gcd and B´ezout . 1 A.II Two Divisibility Theorems . 6 A.III Unique Factorization . 8 A.IV Residue Classes, Congruences . 11 A.V Order, Little Fermat, Euler . 20 A.VI A Brief Account of RSA . 32 B Congruences. The CRT. 35 B.I The Chinese Remainder Theorem . 35 B.II Euler’s Phi Function Revisited . 42 * B.III General CRT . 46 B.IV Application to Algebraic Congruences . 51 B.V Linear Congruences . 52 B.VI Congruences Modulo a Prime . 54 B.VII Modulo a Prime Power . 58 C Primitive Roots 67 iii iv CONTENTS C.I False Cases Excluded . 67 C.II Primitive Roots Modulo a Prime . 70 C.III Binomial Congruences . 73 C.IV Prime Powers . 78 C.V The Carmichael Exponent . 85 * C.VI Pseudorandom Sequences . 89 C.VII Discrete Logarithms . 91 * C.VIII Computing Discrete Logarithms . 92 D Quadratic Reciprocity 103 D.I The Legendre Symbol . 103 D.II The Jacobi Symbol . 114 D.III A Cryptographic Application . 119 D.IV Gauß’ Lemma . 119 D.V The “Rectangle Proof” . 123 D.VI Gerstenhaber’s Proof . 125 * D.VII Zolotareff’s Proof . 127 E Some Diophantine Problems 139 E.I Primes as Sums of Squares . 139 E.II Composite Numbers . 146 E.III Another Diophantine Problem . 152 E.IV Modular Square Roots . 156 E.V Applications . 161 F Multiplicative Functions 163 F.I Definitions and Examples . 163 CONTENTS v F.II The Dirichlet Product . -
Arxiv:Math/0412262V2 [Math.NT] 8 Aug 2012 Etrgae Tgte Ihm)O Atnscnetr and Conjecture fie ‘Artin’S Number on of Cojoc Me) Domains’
ARTIN’S PRIMITIVE ROOT CONJECTURE - a survey - PIETER MOREE (with contributions by A.C. Cojocaru, W. Gajda and H. Graves) To the memory of John L. Selfridge (1927-2010) Abstract. One of the first concepts one meets in elementary number theory is that of the multiplicative order. We give a survey of the lit- erature on this topic emphasizing the Artin primitive root conjecture (1927). The first part of the survey is intended for a rather general audience and rather colloquial, whereas the second part is intended for number theorists and ends with several open problems. The contribu- tions in the survey on ‘elliptic Artin’ are due to Alina Cojocaru. Woj- ciec Gajda wrote a section on ‘Artin for K-theory of number fields’, and Hester Graves (together with me) on ‘Artin’s conjecture and Euclidean domains’. Contents 1. Introduction 2 2. Naive heuristic approach 5 3. Algebraic number theory 5 3.1. Analytic algebraic number theory 6 4. Artin’s heuristic approach 8 5. Modified heuristic approach (`ala Artin) 9 6. Hooley’s work 10 6.1. Unconditional results 12 7. Probabilistic model 13 8. The indicator function 17 arXiv:math/0412262v2 [math.NT] 8 Aug 2012 8.1. The indicator function and probabilistic models 17 8.2. The indicator function in the function field setting 18 9. Some variations of Artin’s problem 20 9.1. Elliptic Artin (by A.C. Cojocaru) 20 9.2. Even order 22 9.3. Order in a prescribed arithmetic progression 24 9.4. Divisors of second order recurrences 25 9.5. Lenstra’s work 29 9.6. -
MAS330 FULL NOTES Week 1. Euclidean Algorithm, Linear
MAS330 FULL NOTES Week 1. Euclidean Algorithm, Linear congruences, Chinese Remainder Theorem Elementary Number Theory studies modular arithmetic (i.e. counting modulo an integer n), primes, integers and equations. This week we review modular arithmetic and Euclidean algorithm. 1. Introduction 1.1. What is Number Theory? Not trying to answer this directly, let us mention some typical questions we will deal with in this course. Q. What is the last decimal digit of 31000? A. The last decimal digit of 31000 is 1. This is a simple computation we'll do using Euler's Theorem in Week 4. Q. Is there a formula for prime numbers? A. We don't know if any such formula exists. P. Fermat thought that all numbers of the form 2n Fn = 2 + 1 are prime, but he was mistaken! We study Fermat primes Fn in Week 6. Q. Are there any positive integers (x; y; z) satisfying x2 + y2 = z2? A. There are plenty of solutions of x2 + y2 = z2, e.g. (x; y; z) = (3; 4; 5); (5; 12; 13). In fact, there are infinitely many of them. Ancient Greeks have written the formula for all the solutions! We'll discover this formula in Week 8. Q. How about xn + yn = zn for n ≥ 3? A. There are no solutions of xn + yn = zn in positive integers! This fact is called Fermat's Last Theorem and we discuss it in Week 8. Q. Which terms of the Fibonacci sequence un = f1; 1; 2; 3; 5; 8; 13; 21; 34; 55; 89; 144; 233;::: g are divisible by 3? A. -
Introduction to Number Theory
Introduction to Number Theory INTRODUCTION Definition: Natural Numbers, Integers Natural numbers: ℕ={0 ,1, 2,} . Integers: ℤ={0 ,±1,±2,} . Definition: Divisor ∣ If a∈ℤ can be writeen as a=bc where b , c∈ℤ , then we say a is divisible by b or, b divides a (denoted b a ), or b is a divisor of a . Definition: Prime We call a number p≥2 prime if its only positive divisors are 1 and p . Definition: Congruent ∣ − If d ≥2 , d ∈ℕ , we say integers a and b are congruent modulo d if d a b and write it a≡bmod d . Examples of Number Theory Questions 1. What are the solutions to a 2b2 =c2 ? s2 −t 2 s2 t 2 Answer: a=s t , b= , c= . 2 2 2. Fundamental Theorem of Arithmetic. Each integer can be written as a product of primes; moreover, the representation is unique up to the order of factors. 3. Theorem (Euclid). There are infinitely many prime numbers. 4. Suppose a , b=1 , i.e. a and d have no common divisors except 1. Are there infinitely many primes ≡ p a mod d ? Equivalently, are there infinitely many prime values of the linear polynomial dxa , x∈ℤ ? Answer: Yes (Dirichlet, 1837). 5. Are there infinitely many primes of the form p=x 21, x∈ℤ ? Not known, expect yes. It is known that there are infinitely many numbers n=x 21 such that n is either prime or has 2 prime factors. 2 2 = ≡ 6. What primes can be written as p=a b ? Answer: If p 2 or p 1 mod 4 . -
Primitive Roots
Chapter 5 Primitive Roots The name primitive root applies to a number a whose powers can be used to represent a reduced residue system modulo n. Primitive roots are there- fore generators in that sense, and their properties will be very instrumental in subsequent developments of the theory of congruences, especially where exponentiation is involved. 5.1 Orders and Primitive Roots With gcd(a, n) = 1, we know that the sequence a % n, a2 % n, a3 % n, . must eventually reach 1 and make a loop back to the first term. In fact, Euler’s theorem says that the length of this periodicity is at most φ(n). We will define this length, for a given a, and ask whether it can sometimes equal φ(n). Definition. Suppose a and n > 0 are relatively prime. The order of a modulo n is the smallest positive integer k such that ak % n = 1. We denote this quantity by |a|n, or simply |a| when there is no ambiguity. For example, |2|7 = 3 because x = 3 is the smallest positive solution to the congruence 2x ≡ 1 (mod 7). Exercise 5.1. Find these orders. a) |3|7 b) |3|10 c) |5|12 d) |7|24 e) |4|25 Exercise 5.2. Suppose |a| = 6. Find |ak| for k = 2, 3, 4, 5, 6. 43 44 Theory of Numbers From now on we agree that the notation |a|n implicitly assumes the condition gcd(a, n) = 1, for otherwise it makes no sense. In particular, by Euler’s theorem, |a|n ≤ φ(n). -
Primality Testing : a Review
Primality Testing : A Review Debdas Paul April 26, 2012 Abstract Primality testing was one of the greatest computational challenges for the the- oretical computer scientists and mathematicians until 2004 when Agrawal, Kayal and Saxena have proved that the problem belongs to complexity class P . This famous algorithm is named after the above three authors and now called The AKS Primality Testing having run time complexity O~(log10:5(n)). Further improvement has been done by Carl Pomerance and H. W. Lenstra Jr. by showing a variant of AKS primality test has running time O~(log7:5(n)). In this review, we discuss the gradual improvements in primality testing methods which lead to the breakthrough. We also discuss further improvements by Pomerance and Lenstra. 1 Introduction \The problem of distinguishing prime numbers from a composite numbers and of resolving the latter into their prime factors is known to be one of the most important and useful in arithmetic. It has engaged the industry and wisdom of ancient and modern geometers to such and extent that its would be superfluous to discuss the problem at length . Further, the dignity of the science itself seems to require that every possible means be explored for the solution of a problem so elegant and so celebrated." - Johann Carl Friedrich Gauss, 1781 A number is a mathematical object which is used to count and measure any quantifiable object. The numbers which are developed to quantify natural objects are called Nat- ural Numbers. For example, 1; 2; 3; 4;::: . Further, we can partition the set of natural 1 numbers into three disjoint sets : f1g, set of fprime numbersg and set of fcomposite numbersg. -
Distribution of Quadratic Non-Residues Which Are Not Primitive Roots
DISTRIBUTION OF QUADRATIC NON-RESIDUES WHICH ARE NOT PRIMITIVE ROOTS S. GUN, B. RAMAKRISHNAN, B. SAHU AND R. THANGADURAI Abstract. In this article, we shall study, using elementary and combinatorial methods, the distribution of quadratic non-residues which are not primitive roots modulo ph or 2ph for an odd prime p and h 1 is an integer. ≥ 1. Introduction Distribution of quadratic residues, non-residues and primitive roots modulo n for any positive integer n is one of the classical problems in Number Theory. In this article, by applying elementary and combinatorial methods, we shall study the distribution of quadratic non-residues which are not primitive roots modulo odd prime powers. Let n be any positive integer and p be any odd prime number. We denote the additive cyclic group of order n by Zn: The multiplicative group modulo n is denoted by Zn∗ of order φ(n); the Euler phi function. Definition 1.1. A primitive root g modulo n is a generator of Zn∗ whenever Zn∗ is cyclic. A well-known result of C. F. Gauss says that Zn∗ has a primitive root g if and only if n = 2; 4 or ph or 2ph for any positive integer h 1: Moreover, the number of primitive roots modulo these n's is equal to φ(φ(n)):≥ Definition 1.2. Let n 2 and a be integers such that (a; n) = 1: If the quadratic congruence ≥ x2 a (mod n) ≡ has an integer solution x; then a is called a quadratic residue modulo n. Otherwise, a is called a quadratic non-residue modulo n: 2` 1 Whenever Zn∗ is cyclic and g is a primitive root modulo n; then g − for ` = 1; 2 ; φ(n)=2 are all the quadratic non-residue modulo n and g2` for ` = · · · 2` 1 0; 1; ; φ(n)=2 1 are all the quadratic residue modulo n: Also, g − for all ` = 1·;·2· ; ; φ(n−)=2 such that (2` 1; φ(n)) > 1 are all the quadratic non-residues which are· · not· primitive roots modulo− n: For a positive integer n; set M(n) = g Zn∗ g is a primitive root modulo n f 2 j g 2000 Mathematics Subject Classification. -
Arxiv:1911.08176V1 [Math.NT]
A GENERALIZATION OF A RESULT OF GAUSS ON PRIMITIVE ROOT HAO ZHONG AND TIANXIN CAI Abstract. A primitive root modulo an integer n is the generator of the multiplicative group of integers modulo n. Gauss proved that for any prime number p greater than 3, the sum of its primitive roots is congruent to 1 modulo p while its product is congruent to µ(p − 1) modulo p, where µ is the M¨obius function. In this paper, we will generalize these two interesting congruences and give the congruences of the sum and the product of integers with the same index modulo n. 1. Introduction Let a and n be two relatively prime integers. The index of a modulo n, denoted by k indn(a), is the smallest positive number k such that a ≡ 1 (mod n). If indn(a)= φ(n), where φ is the Euler’s totient function, then we say a is a primitive root modulo n. Primitive roots are widely used in cryptography, such as attacking the discrete log problem, key exchange problem and many other public key cryptosystem. The primitive root theorem identifies all moduli which primitive roots exist, that is, 1, 2, 4, pα and 2pα where p is an odd prime and α is a positive integer. For an odd prime p > 3, Gauss obtained the following congruences in Article 81, Theorem 1.1 (Gauss). g ≡ 1 (mod p). is a primitive root mod g Y p Theorem 1.2 (Gauss). arXiv:1911.08176v1 [math.NT] 19 Nov 2019 g ≡ µ(p − 1) (mod p). -
Topics in Primitive Roots N
Topics In Primitive Roots N. A. Carella Abstract: This monograph considers a few topics in the theory of primitive roots modulo a prime p≥ 2. A few estimates of the least primitive roots g(p) and the least prime primitive roots g *(p) modulo p, a large prime, are determined. One of the estimate here seems to sharpen the Burgess estimate g(p)≪p 1/4+ϵ for arbitrarily small number ϵ> 0, to the smaller estimate g(p)≪p 5/loglogp uniformly for all large primes p⩾ 2. The expected order of magnitude is g(p)≪(logp) c, c> 1 constant. The corre- sponding estimates for least prime primitive roots g*(p) are slightly higher. The last topics deal with Artin conjecture and its generalization to the set of integers. Some effective lower bounds such as {p⩽x : ord(g)=p-1}≫x(logx) -1 for the number of primes p⩽x with a fixed primitive root g≠±1,b 2 for all large number x⩾ 1 will be provided. The current results in the literature have the lower bound {p⩽x : ord(g)=p-1}≫x(logx) -2, and have restrictions on the minimal number of fixed integers to three or more. Mathematics Subject Classifications: Primary 11A07, Secondary 11Y16, 11M26. Keywords: Prime number; Primitive root; Least primitive root; Prime primitive root; Artin primitive root conjecture; Cyclic group. Copyright 2015 ii Table Of Contents 1. Introduction 1.1. Least Primitive Roots 1.2. Least Prime Primitive Roots 1.3. Subsets of Primes with a Fixed Primitive Roots 1.4.