Skip to main content

All Questions

Filter by
Sorted by
Tagged with
1 vote
1 answer
240 views

The equation $ax^2 +by^2 =1 \mod P$ in cyclotomic field

Let $L$ be a cyclotomic field, and $P$ a prime ideal of $\mathcal{O}_L$. is there any symbol for the equation $ax^2 + by^2 =1 \mod P$ and if so, is it computable in polynomial time? if $a$ is ...
Don Freecs's user avatar
1 vote
0 answers
114 views

Simultaneous elimination of variables in multiple polynomials

I have a system of $n=O(1)$ non-homogeneous polynomials of total degree $d=O(1)$ $p_1,\dots,p_r\in \mathbb Z[x_1,\dots,x_n]$. I would like to eliminate $n-1$ variables simultaneously from the $n$ ...
Turbo's user avatar
  • 13.9k
2 votes
0 answers
221 views

Modular inverse computation - avoiding Euclidean algorithm

Modular inverse is known to be computable by Extended Euclidean algorithm which is the reaping the rewards of computing the GCD of two numbers or proving two numbers are coprime. If we already know ...
Turbo's user avatar
  • 13.9k
5 votes
1 answer
461 views

Discrete log problem modified

Suppose one is given an odd prime $p$, a generator $g$ of $(\mathbb Z/p \mathbb Z)^*$ and two integers $a$ and $b$. Is there an efficient method to determine whether $\log_g a < \log_g b$? (Here we ...
Craig Feinstein's user avatar
0 votes
0 answers
122 views

Will an integer program to deterministically factor integers help derandomize $\mathbb F_q[x]$ factoring?

There are many analogies between the objects $\mathbb F_q[x]$ and $\mathbb Z$. Supposing there is a fixed (say $10^9$) dimension linear integer program (describable without any objective function) in ...
Turbo's user avatar
  • 13.9k
2 votes
1 answer
536 views

Modular square roots problem which is $NP$ hard

It is well known extracting modular square roots modulo a composite number factors the modulus. On other hand given $u,v>0$ and an integer $n$, deciding if there is a factor of $n$ in $[u,v]$ is $...
Turbo's user avatar
  • 13.9k
1 vote
0 answers
70 views

Is this factorization problem in EXP?

Factorization is not known to have a polynomial time algorithm. Traditionally the input length is number of bits in representation of the integer to be factored. However now consider integers of form $...
Turbo's user avatar
  • 13.9k
13 votes
1 answer
609 views

Can we compute the first $n$ digits of $\pi$ in $F(n)$ time?

I've seen various fast algorithms for computing the first few, or directly the $n$-th, digits of $\pi$. However, it seems to me that all these algorithms assume (see last sentence here) that there are ...
domotorp's user avatar
  • 18.8k
2 votes
0 answers
201 views

On GCD and lattice reduction

$LLL$ algorithm is vectorized version of Euclidean algorithm for $GCD$. Even the $m=2$ case known to Lagrange and Gauss does not have an $NC$ algorithm for shortest vector. If $GCD$ is in $NC$ and in ...
Turbo's user avatar
  • 13.9k
4 votes
0 answers
104 views

Questions in number theory related to $NC$ and $P$-completeness

Given $a,b\in\mathbb N$ find $\operatorname{GCD}(a,b)$. Given $a,b,c\in\mathbb N$ find $x,y\in\mathbb Z$ such that $ax+by=c$. Euclidean algorithm solves both. My question is if either 1 or 2 is in ...
Turbo's user avatar
  • 13.9k
2 votes
0 answers
118 views

Computing coefficients of theta functions associated to quadratic forms

If we take an integral positive definite quadratic form $Q$ and set $\Theta_Q(z) = \sum_{k\geq 0}R_Q(k)e^{2\pi ikz}$, what are the most efficient algorithms to compute the $R_Q(k)$? I am aware e.g. of ...
a196884's user avatar
  • 323
2 votes
1 answer
171 views

On roots of irreducible quadratics modulo composites

Assume factorization of $N$ is unknown. What is the best complexity we know to find roots of the irreducible equation $$ax^2+bx+c\equiv0\bmod N?$$ Is this problem equivalent to any hardness results?
Turbo's user avatar
  • 13.9k
0 votes
0 answers
135 views

On a deterministic primes search problem

I feel the following problem might be resolved already. But I could not find any related answers. If $p_1,p_2,\dots,p_t$ are primes where $2\leq t=o(\log n)$ is there a prime within $$\prod_{i=1}^...
Turbo's user avatar
  • 13.9k
1 vote
1 answer
150 views

Counting $\mathrm{mod}\:p$ solutions of Diophantine equation in two variables taking $O(p^2)$ time

Are there Diophantine equations in two variables such that counting solutions $\mathrm{mod}\:p$ requires $O(p^2)$ time? Geometrically this means we have to sort through a positive proportion of the ...
Disen's user avatar
  • 21
3 votes
1 answer
167 views

Is factorial computation known to be in a class smaller than $FEXP$?

Functional version of the counting hierarchy is $FCH$. It is an open problem whether there a sequence of $poly(log(n))$ number of $+,\times$ operations utilizing the assistance of $O(1)$ number of ...
Turbo's user avatar
  • 13.9k
5 votes
0 answers
180 views

Certificate for computation of ideal class group

Is there a known way of producing a certificate that can be used to more quickly verify that an ideal class group of a number field was computed correctly? More formally, I would like to know if there'...
Daniel Hast's user avatar
  • 1,856
1 vote
1 answer
92 views

What are the complexity classes of these problems about divisibility and coprimality?

The problems 'Given $0<a<b$ and a prime $p<a$ is there an integer $\ell\in[a,b]$ such that $p|\ell$?' 'Given $0<a<b$ and an integer $q\not\in[a,b]$ is there an integer $\ell\in[a,b]$ ...
Turbo's user avatar
  • 13.9k
4 votes
0 answers
213 views

What is the complexity class of this problem without Cramer's conjecture?

The problem 'Given $0<a<b$ is there a prime in the interval $[a,b]$?' is in $\mathsf{NP}$. If we assume Cramer's conjecture the problem is in $\mathsf{P}$ since if $b-a>(\log a)^{2+\epsilon}$ ...
Turbo's user avatar
  • 13.9k
3 votes
0 answers
73 views

Reference: Asymptotic bit-complexity of algebraic operations and transcendental functions

This question is a reference request. Does anyone know of a reference that lists the asymptotic bit-complexity of algebraic operations and transcendental functions implemented on a Turing machine that ...
Eric Inclan's user avatar
2 votes
0 answers
139 views

Double Diophantine approximation

Let $0 < \alpha < 1$. For any $n$ there is a closest lower Diophantine approximation $\max p / q \leq \alpha$ with integer $0 \leq p < q \leq n$. It can be found efficiently, e.g., with Stern-...
Mikhail Tikhomirov's user avatar
2 votes
0 answers
99 views

A problem in modular roots

We have three mutually coprime integers $r,t,M$ where $M\asymp K^{\frac12-2\epsilon}$ and $r,t\asymp K^{\frac14+\epsilon}$ holds with some fixed $\epsilon>0$ and $K>0$ is a large parameter. ...
Turbo's user avatar
  • 13.9k
3 votes
1 answer
108 views

Is coprimality in $NC$?

Following reference https://pdfs.semanticscholar.org/e86e/8d7a267a29b9ad4ca112828109adfec55e8b.pdf claims integer coprimality is in $NC$ and it also has one citation. Is this claim valid?
Turbo's user avatar
  • 13.9k
4 votes
1 answer
324 views

Higher roots modulo prime complexity best algorithm

Given integers $a,\ell$ and prime $p$ we need to find the roots of the algebraic equation $x^\ell\equiv a\bmod p$. We know there are at most $\ell$ such $x$. What is the best method to find all such ...
Amal Duriseti's user avatar
3 votes
0 answers
186 views

Factoring problem similar to $RSA$ structure that is possibly not $NP$ complete and not $coNP$ also?

Standard factoring problem $\Pi_1$ is 'Given integers $N$ and $M$ is there a factor $d\in[1,M]$ of $N$?'. This is in $NP$ since such a factor is the witness and in $coNP$ since one can check all the ...
Turbo's user avatar
  • 13.9k
3 votes
0 answers
98 views

Deterministic procedure to find irreducible polynomials

In $\Bbb F_q[x_1,\dots,x_n]$ given $d_1,\dots,d_n\in\Bbb N$ is there a deterministic $O(poly(nd\log q))$ algorithm to find an irreducible polynomial with $d=\max_{i\in\{1,\dots,n\}}d_i$ and $d_i=deg(...
Turbo's user avatar
  • 13.9k
5 votes
1 answer
354 views

Fastest deterministic factoring algorithm in subexponential space?

Strassen's factoring algorithm shows that $\text{FACTORING} \in \text{DTIME}(N^{\frac{1}{4}+o(1)})$, but if I'm not mistaken in my analysis it also uses a similar amount of space. By making a trade-...
Dan Brumleve's user avatar
  • 2,302
0 votes
0 answers
257 views

Hercules and the Hydra with time constraints

The game of Hercules vs. the Hydra can be put in terms of a single number in hereditarily-factorized form. For example, if the Hydra is $2^{19^3} \cdot 5^{11^7}$, Hercules must choose between two ...
Dan Brumleve's user avatar
  • 2,302
12 votes
1 answer
547 views

Seeking references for finding primes infinitely often

I've been pondering this weakened version of the finding primes problem for a while: Is there an algorithm which given $k$ outputs a prime $p > 2^k$ in time $F(\log_2(p))$? This differs from ...
Dan Brumleve's user avatar
  • 2,302
3 votes
2 answers
332 views

On generating squarefree integers and primes?

Given an $\alpha\in(0,1)$ and $n\in\Bbb N$ what are some known deterministic algorithms to sample $O(n^\alpha)$ (not just get one) square free integers of $n$ bits? Is it $O(n^{\alpha})$ complexity? ...
Turbo's user avatar
  • 13.9k
18 votes
1 answer
607 views

Complexity of a Fibonacci numbers discrete log variation

In my work I encountered the following FIBMOD PROBLEM: Given $k,m$ in binary, decide if there exists $n$ such that $\, F_n = k \,$ (mod $m$). Here $F_n$ is a Fibonacci number. This is a variation ...
Igor Pak's user avatar
  • 17k
7 votes
1 answer
382 views

Counting twin primes efficiently

This question, as well as its answers and comments, highlights a lot of unsettling numerical coincidences where certain sums over twin primes ostensibly converge to all kinds of weird values, however ...
Mikhail Tikhomirov's user avatar
1 vote
1 answer
153 views

Specializing non-trivial primality tests

Primes $p$ are integers with no factors (composite allowed) in $[1,p]$. There is a polynomial time test for them. Given an interval $[a,b]$ what is the best way to test given integer $q$ has no ...
Turbo's user avatar
  • 13.9k
11 votes
4 answers
3k views

Computational complexity of finding the smallest number with n factors

Given $n \in \mathbb{N}$, suppose we seek the smallest number $f(n)$ with at least $n$ distinct factors, excluding $1$ and $n$. For example, for $n=6$, $f(6)=24$, because $24$ has the $6$ distinct ...
Joseph O'Rourke's user avatar
2 votes
1 answer
295 views

Efficiently lifting $a^2+b^2 \equiv c^2 \pmod{n}$ to coprime integers

Let $n$ be integer with unknown factorization. Assume factoring $n$ is inefficient. Let $a,b,c$ satisfy $a^2+b^2 \equiv c^2 \bmod{n}, 0 \le a,b,c \le n-1$. Is it possibly to lift the above ...
joro's user avatar
  • 25.4k
3 votes
0 answers
573 views

Complexity of $\mathsf{gcd}(a,b)\bmod N$

Given $a,b\in\Bbb N$ where each $a,b$ is $n$-bits, we can compute $\mathsf{gcd}(a,b)$ in $cn^{1+\epsilon}$ bit operations for some fixed $c\geq1$. My query is given $N,a,b$ where $a,b$ is $n$-bits ...
Turbo's user avatar
  • 13.9k
3 votes
1 answer
382 views

Equivalence between Diffie Hellman and Discrete Log

For which non-trivial groups, do we know that the Diffie Hellman problem and the Discrete Log are equivalent? Is there any group for which we suspect them to be different? Could there be a finite ...
user avatar
2 votes
0 answers
306 views

Avoiding Chinese Remainder Theorem

Given $k\in\Bbb N$ with $k<(\log_2N)^{\frac1\alpha}$ where $\alpha>2$ is fixed and $N$ being some integer such that $$N<\prod_{i=1}^k\pi_i^{a_i}$$ where $\pi_1,\pi_2,\dots,\pi_{k-1},\pi_k$ ...
user avatar
13 votes
1 answer
2k views

Erdős multiplication problem revisited

This is a well-known problem and is about counting the number of distinct numbers in the $n \times n$ multiplication table. The very problem has been discussed in-depth and, as such, I require no ...
user avatar
8 votes
1 answer
716 views

Finding colinear points in F_q^n

Forgive me if this is well known, it's not really my field, but it's a problem I've run across and thought about a bit. Let $\mathbb{F}_q$ be a finite field with $q$ elements, let $n\ge2$, and let $A,...
Joe Silverman's user avatar
4 votes
0 answers
369 views

Reducing factoring prime products to factoring integer products (in average-case)

My question is about the equivalence of the security of various candidate one-way functions that can be constructed based on the hardness of factoring. (This question has been asked also in the CS ...
Omid Etesami's user avatar
8 votes
2 answers
485 views

Efficient computation of the least fraction with square denominator greater than the square root of 2.

The least rational number greater than $\sqrt{2}$ that can be written as a ratio of integers $x/y$ with $y\le10^{100}$ can be found in a moment using a little Python program. Can anyone write a ...
Sidney Raffer's user avatar
54 votes
2 answers
8k views

Walsh Fourier transform of the Möbius function

This question is related to this previous question where I asked about ordinary Fourier coefficients. Special case: is Möbius nearly orthogonal to Morse August Ferdinand Möbius (November 17, 1790 – ...
6 votes
1 answer
369 views

Speeding the quadratic sieve with an oracle

Suppose we have an odd composite $N$ and want to find numbers $a_1,\ldots,a_k$ such that each $a_i^2$, reduced mod $N$, is $b$-smooth. Of course we can use the quadratic sieve algorithm (minus the ...
Charles's user avatar
  • 9,114
5 votes
4 answers
866 views

Reconstructing a fraction from its first digits

It is not difficult to see that any reduced fraction $\frac{p}{q}$ where $0 < p < q $ and both $p$ and $q$ have at most $N$ digits (where $N$ is a fixed integer) can be reconstructed from its ...
Ewan Delanoy's user avatar
  • 3,595