Computing Greatest Common Divisors and Factorizations in Quadratic Number Fields*

In a quadratic number field Q(√ D ), D a squarefree integer, with class number 1 any algebraic integer can be decomposed uniquely into primes but for only 21 domains Euclidean algorithms are known. It was shown by Cohn [5] that for D ≤ – 19 even remainder sequences with possibly non-decreasing norms cannot determine the GCD of arbitrary inputs. We extend this result by showing that there does not even exist an input in these domains for which the GCD computation becomes possible by allowing non-decreasing norms or remainders whose norms are not as small as possible. We then provide two algorithms for computing the GCD of algebraic integers in quadratic number fields Q(√ D ). The first applies only to complex quadratic number fields with class number 1, and it is based on a short vector construction in a lattice. Its complexity is O (S 3), where S is the number of bits needed to encode the input. The second allows to compute GCDs of algebraic integers in arbitrary number fields (ideal GCDs if the class number is > 1). It requires only O (S 2) binary steps for fixed D , but works poorly if D is large. Finally, we prove that in any domain the computation of the prime factorization of an algebraic integer can be reduced in polynomial-time to the problem of factoring its norm into rational primes. Our reduction is based on a constructive version of a theorem by A. Thue.