Subexponential Class Group Computation in Quadratic Orders (abstract)

نویسنده

  • MICHAEL JOHN JACOBSON
چکیده

In 1989, the first subexponential algorithm for computing the class group of an imaginary quadratic order was introduced by Hafner and McCurley. Their algorithm is based on an integer factorization algorithm due to Seysen, and is conditional on the truth of the Extended Riemann Hypothesis. Not long after, their result was generalized to arbitrary algebraic number fields by Buchmann. Efficient versions of these algorithms for imaginary quadratic orders and real quadratic orders were implemented by Düllmann and Cohen, Diaz y Diaz, and Olivier, which yielded a substantial improvement in the sizes of discriminants for which class groups and regulators could be computed. In this thesis, we present a new algorithm for computing the class group and regulator of a quadratic order. Our algorithm is also based on an integer factorization algorithm, namely the multiple polynomial quadratic sieve. We describe how two important practical improvements of this factoring algorithm, self-initialization and the large prime variant, can be applied to class group computation. In addition, we describe a number of practical improvements related specifically to class group computation, such as methods for computing the Hermite normal form transformation matrix in conjunction with a modular Hermite normal form algorithm. Computational results are presented, which clearly demonstrate the efficiency of our algorithm. As an application, we present algorithms for computing discrete logarithms in the class group and for principality testing, based on the work of Düllmann and Abel. We show how our idea of generating relations with sieving can be applied to improve the performance of these algorithms, and present computations illustrating this practical improvement. We also present a number of quadratic orders with interesting mathematical properties whose class groups and regulators were computed with our algorithm. In particular, we present some imaginary quadratic orders which correspond to quadratic polynomials with high densities of prime values, and real quadratic orders which correspond to instances of Pell’s equation with exceptionally large minimal solutions. These types of quadratic orders also represent worst-case and best-case inputs to our algorithm, and we discuss the performance of the algorithm on these inputs in relation to that on more average inputs.

برای دانلود رایگان متن کامل این مقاله و بیش از 32 میلیون مقاله دیگر ابتدا ثبت نام کنید

ثبت نام

اگر عضو سایت هستید لطفا وارد حساب کاربری خود شوید

منابع مشابه

Reducing Logarithms in Totally Non-maximal Imaginary Quadratic Orders to Logarithms in Finite Fields

Since nobody can guarantee that the computation of discrete logarithms in elliptic curves or IF p remains intractible for the future it is important to study cryptosystems based on alternative groups. A promising candidate, which was proposed by Buch-mann and Williams 8], is the class group C l(() of an imaginary quadratic order O. This ring is isomorphic to the endomorphism ring of a non-super...

متن کامل

A survey of cryptosystems based on imaginary quadratic orders

Since nobody can guarantee that popular public key cryptosystems based on factoring or the computation of discrete logarithms in some group will stay secure forever, it is important to study different primitives and groups which may be utilized if a popular class of cryptosystems gets broken. A promising candidate for a group in which the DL-problem seems to be hard is the class group Cl(∆) of ...

متن کامل

A Rigorous Subexponential Algorithm for Computation of Class Groups

Let C( -d) denote the Gauss Class Group of quadratic forms ofa negative discriminant -d (or equivalently, the class group of the imaginaryquadratic field Q(~)). We give a rigorous proof that there exists a Las Ve-gas algorithm that will compute the structure of C( -d) with an expected run-ning time of L( d) V2+o( 1) bit operations, where L( d) = exp( y'log d log log d) .Thus...

متن کامل

On Class Group Computations Using the Number Field Sieve

The best practical algorithm for class group computations in imaginary quadratic number fields (such as group structure, class number, discrete logarithm computations) is a variant of the quadratic sieve factoring algorithm. Paradoxical as it sounds, the principles of the number field sieve, in a strict sense, could not be applied to number field computations, yet. In this article we give an in...

متن کامل

An Efficient NICE-Schnorr-Type Signature Scheme

Recently there was proposed a novel public key cryptosystem [17] based on non-maximal imaginary quadratic orders with quadratic decryption time. This scheme was later on called NICE for New Ideal Coset Encryption [6]. First implementations show that the decryption is as efficient as RSA-encryption with e = 2 +1. It was an open question whether it is possible to construct comparably efficient si...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

عنوان ژورنال:

دوره   شماره 

صفحات  -

تاریخ انتشار 2005