2
$\begingroup$

Modular inverse is known to be computable by Extended Euclidean algorithm which is the reaping the rewards of computing the GCD of two numbers or proving two numbers are coprime.

If we already know the numbers $a,q$ are coprime then do we know any better way to compute $a^{-1}\bmod q$ without Euclidean algorithm?

Essentially can we solve the integer program:

\begin{gather*} \exists u,v\in\mathbb Z \\ -q/2<u<q/2 \\ -a/2<v<a/2 \\ au+qv=1 \end{gather*}

without LLL algorithm?

Why cannot we think differently than the Euclidean algorithm? Is there any barrier?

Implicit in the question is why cannot we NC reduce Extended GCD algorithm to GCD computation itself as we can replace last constraint by $$au+qv=g$$ where $g$ now is $\operatorname{GCD}(a,q)$ (now assumed may not be coprime)?

$NC$ stands for Nick's class. Essentially Euclidean algorithm is performed on $O(n)$ sequential steps where $n$ is number of bits in $a$ and $q$ on a single processor. Can we increase the number of processors to $poly(n)$ and reduce the number of steps to $O(poly(\log n))$? This question is captured by the class $NC$.

$\endgroup$
16
  • $\begingroup$ You could compute $a^{\phi(q)-1}$ via square-and-multiply. But this is probably not what you're looking for as computation of $\phi(q)$ could be nontrivial. $\endgroup$
    – Aeryk
    Commented Apr 5, 2023 at 17:33
  • $\begingroup$ But @Aeryk's suggestion could be useful in case $q$ is known to be prime. $\endgroup$ Commented Apr 5, 2023 at 17:48
  • 2
    $\begingroup$ I am unfamiliar with the phrase "NC reduce". Please edit that part of the question to avoid the abbreviation by spelling out what is meant there. $\endgroup$
    – KConrad
    Commented Apr 5, 2023 at 18:36
  • $\begingroup$ @KConrad en.wikipedia.org/wiki/NC_(complexity) $\endgroup$ Commented Apr 5, 2023 at 18:43
  • 2
    $\begingroup$ Pierre's Last Theorem, The Bernhard Hypothesis, Max's Lemma, Joseph numbers, .... $\endgroup$ Commented Apr 6, 2023 at 0:34

0

You must log in to answer this question.