Re: Congruence based factoring algorithm



In article <jo33j4lu3art5l8diohvrgiv7sqqtlf766@xxxxxxx>,
rossum <rossum48@xxxxxxxxxxxx> wrote:
It would also be useful if you could qualify "near to" a bit more
accurately. How far away from sqrt(T) can p get? Obviously the
algorithm will run faster with as small a p as possible; what is the
lower limit on p? As Patricia says, is p = 3 allowed for all T?

Low primes work, in that they can give an ak such that ak = f1 mod p,
where f1 is a factor of nT. But to find the actual value of f1, you
need to check ak + jp, for j >= 0. You might have to try a lot of
values of j to find the right one, if p is small.

I think it ends up being a tradeoff. If you use large p, then you
essentially end up with a big search for suitable k, but once you find a
k that works, it isn't hard to find the factor. If you use a small p,
finding k is easy, but then you have a big search to go from the factor
mod p to the factor itself.

How about using multiple primes? That is, find an a1*k1 mod p1, a2*k2
mod p2, and so on, with the p's chosen so that p1*p2*... > nT. Use CRT
to figure out f1 mod p1*p2*....

(Pick all the p's so that the are 3 mod 4, so that computing the modular
square roots will be easy).

--
--Tim Smith
.



Relevant Pages

  • Re: square roots mod p.
    ... the algorithm in the "Handbook of Applied Cryptography" by Menezes, ... Legendre symbol of a mod p and found that a is a quadratic residue ... The expected running time of the ... r and -r are the two square roots of a mod p. ...
    (sci.math)
  • Re: Congruence based factoring algorithm, revised
    ... It's basically a disguised version of trial division. ... description of the algorithm. ... algorithm for computing modular square roots. ... his results are almost all wrong, but rather than mathematicians are ...
    (comp.theory)
  • Re: The factoring problem
    ... > multiplication is an algorithm invented by man. ... All known solutions for factoring ... square roots modulo pq. ... If you gave me the square roots of "x" modulo pq I could trivially ...
    (sci.crypt)
  • Re: Algorithm for denesting nested radicals
    ... does the original poster have an inefficient ... it would be good to see this algorithm. ... There is a very simple way of computing with radicals, ... Simplifying Square Roots of Square Roots by Denesting ...
    (sci.math.symbolic)
  • Re: Help needed implementing fuzzy logic
    ... of false matches (IIRC it will match Robert Smith and Robin Smythe). ... The Metaphone algorithm might get you a bit closer. ... I would like to catch that Robert Smith ...
    (microsoft.public.access.forms)