Fast algorithms for polynomials and matrices Part 6: Polynomial factorization
|
|
- Rafe Cooper
- 5 years ago
- Views:
Transcription
1 Fast algorithms for polynomials and matrices Part 6: Polynomial factorization by Grégoire Lecerf Computer Science Laboratory & CNRS École polytechnique Palaiseau Cedex France 1 Classical types of decompositions separable: factorswithequalrootmultiplicities irreducible: setofirreduciblefactors squarefree: equalmultiplicitiesoftheirreduciblefactors absolute: irreducibleoverthealgebraicclosure Separable factorization Seidenberg condition P Squarefree factorization Absolute factorization Univariate factorization Irreducible factorization Basic arithmetic for polynomials and matrices 2
2 Separable decomposition Definition 1. Let K be a field of characteristic p, andletf K[y], withd deg F>0. F is said to be separable if it has no multiple root in the algebraic closure K of K, equiv.discriminant F = Resultant (F,F ) 0. The separable decomposition of F is the decomposition of F according to the multiplicities of its roots: F (y)= s i=1 G i (y qi ) mi,with G i (y qi ) pairwise coprime, G i separable, q i is a power of p if p>0, otherwiseq i =1, m i is not divisible by p, (q i,m i ) pairwise distinct. Proof. The roots of G i (y qi ) are the ones of F with multiplicity q i m i. Gianni and Trager (1996) showed that the separable decomposition of a polynomial f K[x] of degree d can be computed in softly quadratic time over any field, by extending Musser s algorithm. A similar extension of Yun s algorithm leads to: Proposition 2. [ Lecerf, 2008]The separable decomposition of a polynomial f K[x] of degree d can be computed with O(M(d) log d). 3 Example of separable decomposition Mmx] use "factorix"; x == polynomial (0,1); F == (x^9 + x^3 + 1)^2 * (x^4-1); Mmx] separable_factorization F [[x 4 +1, 1, 1], [x 9 + x 3 +1, 1, 2], [1, 1, 1]] Mmx] sep == separable_factorization (F mod modulus 3) [[x +2, 1, 7], [x 3 + x 2 + x +1, 1, 1], [x 2 + x +2, 3, 2]] Mmx] tmp == [ dilate (f[0], f[1])^f[2] f in sep ]; F mod modulus 3 = big_mul tmp true 4
3 Reductions to the separable case The squarefree factorization reduces to splitting a separable polynomial F (y p ) into G(y p )H(y) p,withg(y p ) and H(y) squarefree, assuming that F is separable. This task is not computable in general! It is computable if we assume that the Seidenberg condition P holds, that is: p-th roots can be extracted in any (purely inseparable) algebraic extension of K. Example 3. If K = F p then we always have F (y p )=F (y) p,hencethatg =1 and H = F. Example 4. If K = F p k then we always have F (y p )=H(y) p,whereh = d i=0 F 1/p i y i.theextractionof the p-th root of a F p k can be computed as a pk 1,whichtakesO(klog p) operations in F p k. ( Example 5. If K = F p (x) then gcd F (x, y), ) F (x, y) (x, y p )=H(x, y) p. x Let F be a separable irreducible polynomial. Then F (y p ) is either irreducible or a power of p. Theirreducible factorization can be deduced from the separable decomposition by the only use of p-th root extractions. 5 Irreducible factorization Theorem 6. [ van der Waerden (1930), Fröhlich and Shepherdson (1956)] The irreducible decomposition of a univariate polynomial over an effective field is not computable in general. AfieldK is explicitly finitely generated over a field F if it is the fraction field of F[x 1, prime and explicitly given by a finite set of generators.,x n ]/P with P Theorem 7. [ van der Waerden, Fröhlich and Sheperdson, Seidenberg, Richman,...] The irreducible decomposition is computable over any explicitly finitely generated extension of a prime field. General algorithms Davenport and Trager (1981): never fully implemented. Steel (2005): thefirst(andstillunique)mostgeneralalgorithm,implementedinthemagma computer algebra system. 6
4 Algorithmic dependencies for irreducible factorizations Under the assumption that the polynomial to be factored is separable of degree d. Specific algorithms for F pk[y], where F pk is the finite field with pk elements. Factorization in F p[y] implies factorization in Q[y]. Factorization in K[y] implies factorization in K[α][y], with α separable. Factorization in K[y] implies factorization in K[x, y]. Factorization in K[x, y] implies factorization in K[x1,., xn, y]. 7 Short history about univariate factorization over finite fields Early ideas by Gauss, Galois, Arwins. First algorithms: Berlekamp (1970), Zassenhaus (1969), Cantor & Zassenhaus (1981). Best practical algorithm : von zur Gathen & Shoup (1992) in O (d2 + d log q) operations in F q and degree d. Several optimized variants for specific cases: von zur Gathen, Shoup, Niederreiter, Gao, Kaltofen,... The best known theoretical algorithm is a combination of: Kaltofen and Shoup (1998): reduction to modular composition, Kedlaya and Umans (2008): softly linear time for modular composition over finite fields. Randomized bit complexity in O ((d1.5 + d log q)log q). Modular composition: g(h) mod f, with f, g, h in K[x] of degree at most d. Mmx] use "gregorix"; x == polynomial (0,1); F == (x^9 + x^3 + 1)^2 * (x^4-1); Mmx] irreducible_factorization (F mod modulus 3) [[x + 2, 7], [x + 1, 1], [x2 + 1, 1], [x2 + x + 2, 6]] 8
5 Univariate factorization over Q First exponential time algorithm by Kronecker (1882): constructandtestallthepossibilitiesaccording to the divisibility constraints. Hensel lifting popularized in computer algebra by Zassenhaus (1969), with exponential time. Mmx] use "gregorix"; p == modulus 5; F == polynomial (-1, 0, 0, 0, 1) x 4 1 Mmx] irreducible_factorization (F mod p) [[x +1, 1], [x +2, 1], [x +3, 1], [x +4, 1]] Mmx] p_adic_precision:= 4; Fp: Polynomial P_adic Integer == F; Mmx] fp == irreducible_factorization (Fp) [[(1 + O(5 4 )) x O(5 4 ), 1], [(1 + O(5 4 )) x O(5 4 ), 1], [(1 + O(5 4 )) x +1+O(5 4 ), 1], [(1 + O(5 4 )) x O(5 4 ), 1]] Mmx] fp[0][0] * fp[3][0] 9 (1 + O(5 4 )) x 2 + O(5 4 ) x +1+O(5 4 ) First polynomial time algorithm by Lenstra & Lenstra & Lovász (1982) Mmx] F == polynomial (6, 0, -5, 0, 1) x 4 5 x 2 +6 Mmx] N z == z - evaluate (F, z) /evaluate (derive F, z); Mmx] a == N N N N N Mmx] integer_relation ([1, a], 30) [ e8, e8] Mmx] c == integer_relation ([1, a, a^2], 30) [ , 0, ] Mmx] G == polynomial (as_integer c[i] i in 0..#c) x 2 +2 Mmx] F mod G 10
6 0 Mmx] F div G x 2 +3 Remarks: Here we are using PSLQ (partial sums of squares / lower trapezoidal orthogonal decomposition) by Bailey & Ferguson (1991). The approach suffers from the need of computing big integer relations never competitive in practice. The first practical polynomial time algorithm is due to van Hoeij (2002). Implementedandimproved by Belabas & van Hoeij & Klüners & Steel (2004), andfurtherimprovedbynovocin. F = F 1 F r F = F F 1 F F F r F r Mmx] use "gregorix"; p == modulus 9973; F == swinnerton_dyer_polynomial 2 * swinnerton_dyer_polynomial 3; irreducible_factorization (F mod p) [[x x + 342, 1], [x x , 1], [x x +1, 1], [x x +1, 1], [x x + 342, 1], [x x , 1]] 11 Mmx] Fp == F :> Polynomial P_adic Integer; fp == irreducible_factorization (Fp); Mmx] G == [(Fp div fp[i][0]) * derive fp[i][0] i in 0..#fp]; Mmx] W == [ evaluate (G[i], 3 :> P_adic Integer)[3,20] i in 0..#G ] [ , \ , \ , \ , \ , ] Mmx] bit_precision:= 1000; I == integer_relation ([ W[i] :> Floating i in 0..#G] >< [ ^17 ], 200); [ as_integer I[i] i in 0..#I ] [0, 1, 0, 0, 1, 0, 1] Mmx] Hp == fp[1][0] * fp[4][0] (1 + O( )) x 4 + O( ) x 3 +( O( )) x 2 + O( ) x +1+O( ) 12
7 Mmx] to_integer u == if u[0,3] > 9973^3 div 2 then u[0,3] ^3 else u[0,3]; H == polynomial (to_integer Hp[i] i in 0..#Hp) x 4 10 x 2 +1 Mmx] F div H x 8 40 x x x Advantage to the first polynomial time method: smaller integer relations! Very efficient in practice! 13 Irreducible factorization over an algebraic extension If α is separable over K then the factorization in K[α][y] follows from the one in K[y] and primitive element calculations [van der Waerden, Trager]. Otherwise we can assume that α p = a K\K p without loss of generality. This situation can be avoided if we reorganize the presentation of K[α] over its prime field [van der Waerden, Maclane (1930)]. Otherwise one can factor F (α, y) p in K[y p ] and then rely on Seidenberg condition P. 14
8 d x :=partial degree in x d y partial degree in y Bivariate polynomial factorization Theorem 8. Factorization of separable polynomials in K[y] implies Factorization of separable polynomials in K[x][y]. First algorithm goes back to Kronecker: exponentialtime,andreductiontounivariatefactorizationin degree d x d y. Hensel lifting and recombination with exhaustive search. Reduction to univariate factorization in degree d y. Studied by Musser (1973), Wang & Rothschild (1975), Wang (1978), von zur Gathen (1984), Bernardin (1999), Gao & Lauder (2000). Mmx] use "gregorix"; p == modulus 101; x == polynomial (0,1) mod p; F == polynomial (-x^2 - x^4, 2 + 2*x^2, -1, -2, 1) y y y 2 +(2x 2 +2)y x x 2 Mmx] Fs == F :> Polynomial Series Modular Integer; fs == irreducible_factorization (Fs) 15 [[(1 + O(z 10 )) y z z z z 8 + O(z 10 ), 1], [(1 + O(z 10 )) y z z z z 8 + O(z 10 ), 1], [(1 + O(z 10 )) y + 50 z z z z 8 + O(z 10 ), 1], [(1 + O(z 10 )) y z z z z 8 + O(z 10 ), 1]] Mmx] Gs == fs[0][0] * fs[1][0] (1 + O(z 10 )) y 2 + O(z 10 ) y z 2 + O(z 10 ) Mmx] G == polynomial (Gs[i][0,4] i in 0..#Gs) y x Mmx] F mod G 0 Mmx] F div G y y + x 2 First polynomial time algorithm due to Kaltofen (1982). Several variants by Lenstra, Kannan, Lovász, Chistov, Grigoriev, von zur Gathen,... all derived from LLL and Padé-Hermite. Mmx] series_precision := 10; s == -fs[0][0][0] 16
9 z z z z 8 + O(z 10 ) Mmx] M == pade_hermite ([s^0, s^1, s^2], 10) 19 x x x x x x x x 2 41 x x 2 86 x x 2 Mmx] polynomial (@(row (M, 0) / (82 mod p))) y x First softly quadratic time algorithm by Gao (2003). Fast recombination stage for Hensel lifting by Belabas, van Hoeij, Klüners, and Steel (2004), with worst case precision Ω(d x d y ),andtotalcostinõ(d x d y 3 ). F = F 1 F r F = F F 1 F F F r F r Mmx] Gs == [(Fs div f[0]) * derive f[0] f in fs] 17 [(1 + O(z 10 )) y 3 +( z z z z 8 + O(z 10 )) y 2 +(2+2z z z z 8 + O(z 10 )) y z z z z 8 + O(z 10 ), (1 + O(z 10 )) y 3 +( z z z z 8 + O(z 10 )) y 2 +( z z z 8 + O(z 10 )) y + z z z z 8 + O(z 10 ), (1 + O(z 10 )) y 3 +( z z z z 8 + O(z 10 )) y 2 +( z 2 + O(z 10 )) y z z z 6 +7z 8 + O(z 10 ), (1 + O(z 10 )) y 3 +(50 z z z z 8 + O(z 10 )) y 2 + ( z 2 + O(z 10 )) y + 51 z z z z 8 + O(z 10 )] Mmx] M == [ g[i][4] g in Gs i in 0..4 ] Mmx] ker M Mmx] series_precision:=10; Gs[0] + Gs[1] (2 + O(z 10 )) y 3 +(97 + O(z 10 )) y 2 +(2z 2 + O(z 10 )) y + O(z 10 ) 18
10 Mmx] fs[0][0] * fs[1][0] (1 + O(z 10 )) y 2 + O(z 10 ) y z 2 + O(z 10 ) Recombination scheme with optimal precision d x +1: Lecerf (2007), with cost in Õ(d x d y 2 ) forany characteristic. Let F = F 1 F s be the irreducible factorization in K[[x]][y] of F. Let G i = F i F /F i dx+1,fori in {1,,s}. Let ζ be the residue class of y modulo F. The recombinations can be read off from the echelon solution basis of: (l 1,,l s ) K s s d l i G i (x, ζ) =0, where F (x, ζ)=0. dx i=1 F y Mmx] H == [polynomial (g[i][0,5] i in 0..#g) g in Gs] [y 3 +(38 x x ) y 2 +(25 x 4 +2x 2 +2)y + 50 x x 2,y 3 +(63 x x ) y 2 + (76 x ) y + 51 x 4 + x 2,y 3 +(38 x x ) y 2 +(100 x ) y + 12 x x 2 +2, y 3 +(63 x x 2 ) y 2 +(100 x ) y + 89 x x 2 ] Mmx] Dx h == polynomial (derive h[i] i in 0..#h); 19 Mmx] Dy h == derive h; Mmx] D h == (Dx h * Dy F - Dy h * Dx F) * Dy F - (Dx Dy F * Dy F - Dy Dy F * Dx F) * h; Mmx] R == [ (D h) mod F h in H ] [(97 x x 5 ) y 3 +(24 x x 5 ) y 2 +(83 x x x 5 ) y +6x 11 +6x x x 5, (4 x 7 +6x 5 ) y 3 +(77 x x 5 ) y 2 +(18 x 9 +9x 7 +3x 5 ) y + 95 x x 9 + x 7 +3x 5, (4 x x 5 ) y 3 +(12 x x 5 ) y 2 +(83 x x x 5 ) y +6x x x x 5, (97 x 7 +6x 5 ) y 3 +(89 x x 5 ) y 2 +(18 x x 7 +6x 5 ) y + 95 x x x x 5 ] Mmx] N == matrix (h[i][5] h in R i in 0..4) Mmx] ker N
11 Multivariate polynomial factorization Let F K[x 1,,x n ] Either extend the previous techniques from K[[x]][y] to K[[x 1,,x n1 ]][x n ], or reduce to K[x, y] via the Bertini/Hilbert theorem: for a finite subset S of K upper bound the density of points (a,b,c) in (S n ) 3 for which F (a 1 x+b 1 y +c 1,, a n x + b n y + c n ) is irreducible if F is irreducible. Hilbert (1892) (before Bertini): the density tends to 0 for large S. Heintz & Sieveking (1981), Kaltofen (1982): use in computer algebra. von zur Gathen (1985): 9 d2 /#S. Bajaj, Canny, Garrity & Warren (1993): d 4 /#S when K = C. Kaltofen (1995): 2d 4 /#S when K is perfect. Gao (2003): 2d 3 /#S when p =0 or p 2d 2. Lecerf (2007): 23 8 d2 /#S when p =0 or p d(d 1) + 1. Softly linear reduction to one variable whenever n 3, assumingfastmultivariatepowerseriesproduct available. 21
Fast algorithms for factoring polynomials A selection. Erich Kaltofen North Carolina State University google->kaltofen google->han lu
Fast algorithms for factoring polynomials A selection Erich Kaltofen North Carolina State University google->kaltofen google->han lu Overview of my work 1 Theorem. Factorization in K[x] is undecidable
More informationFactoring univariate polynomials over the rationals
Factoring univariate polynomials over the rationals Tommy Hofmann TU Kaiserslautern November 21, 2017 Tommy Hofmann Factoring polynomials over the rationals November 21, 2017 1 / 31 Factoring univariate
More informationNew Recombination Algorithms for Bivariate Polynomial Factorization Based on Hensel Lifting
New Recombination Algorithms for Bivariate Polynomial Factorization Based on Hensel Lifting Grégoire Lecerf To cite this version: Grégoire Lecerf. New Recombination Algorithms for Bivariate Polynomial
More informationFactoring Polynomials and Groebner Bases
Clemson University TigerPrints All Dissertations Dissertations 8-2009 Factoring Polynomials and Groebner Bases Genhua (yinhua) Guan Clemson University, gguan@clemson.edu Follow this and additional works
More informationModern Computer Algebra
Modern Computer Algebra JOACHIM VON ZUR GATHEN and JURGEN GERHARD Universitat Paderborn CAMBRIDGE UNIVERSITY PRESS Contents Introduction 1 1 Cyclohexane, cryptography, codes, and computer algebra 9 1.1
More informationDeterministic distinct-degree factorisation of polynomials over finite fields*
Article Submitted to Journal of Symbolic Computation Deterministic distinct-degree factorisation of polynomials over finite fields* Shuhong Gao 1, Erich Kaltofen 2 and Alan G.B. Lauder 3 1 Department of
More informationIrreducible Polynomials over Finite Fields
Chapter 4 Irreducible Polynomials over Finite Fields 4.1 Construction of Finite Fields As we will see, modular arithmetic aids in testing the irreducibility of polynomials and even in completely factoring
More informationChapter 4 Finite Fields
Chapter 4 Finite Fields Introduction will now introduce finite fields of increasing importance in cryptography AES, Elliptic Curve, IDEA, Public Key concern operations on numbers what constitutes a number
More informationComputer Algebra: General Principles
Computer Algebra: General Principles For article on related subject see SYMBOL MANIPULATION. Computer algebra is a branch of scientific computation. There are several characteristic features that distinguish
More informationPractical polynomial factoring in polynomial time
Practical polynomial factoring in polynomial time William Hart University of Warwick Mathematics Institute Coventry CV4 7AL, UK W.B.Hart@warwick.ac.uk Mark van Hoeij Florida State University Tallahassee,
More informationA Course in Computational Algebraic Number Theory
Henri Cohen 2008 AGI-Information Management Consultants May be used for personal purporses only or by libraries associated to dandelon.com network. A Course in Computational Algebraic Number Theory Springer
More informationBasic Algorithms in Number Theory
Basic Algorithms in Number Theory Algorithmic Complexity... 1 Basic Algorithms in Number Theory Francesco Pappalardi #2 - Discrete Logs, Modular Square Roots, Polynomials, Hensel s Lemma & Chinese Remainder
More informationA RELATIVE VAN HOEIJ ALGORITHM OVER NUMBER FIELDS
A RELATIVE VAN HOEIJ ALGORITHM OVER NUMBER FIELDS KARIM BELABAS Abstract. Van Hoeij s algorithm for factoring univariate polynomials over the rational integers rests on the same principle as Berlekamp-Zassenhaus,
More informationDetermining the Galois group of a rational polynomial
JAH 1 Determining the Galois group of a rational polynomial Alexander Hulpke Department of Mathematics Colorado State University Fort Collins, CO, 80523 hulpke@math.colostate.edu http://www.math.colostate.edu/
More information2 J. Kluners and M. Pohst (993)] for calculating subelds. In this article we generalize and improve the methods of Dixon (990). The generating polynom
J. Symbolic Computation (996), {000 On Computing Subelds JURGEN KLUNERS AND MICHAEL POHST Technische Universitat Berlin, Fachbereich 3, Sekr. MA 8-, Strae des 7. Juni 36, 0623 Berlin, Germany E-mail address:
More informationFast algorithms for polynomials and matrices Part 2: polynomial multiplication
Fast algorithms for polynomials and matrices Part 2: polynomial multiplication by Grégoire Lecerf Computer Science Laboratory & CNRS École polytechnique 91128 Palaiseau Cedex France 1 Notation In this
More informationPolynomial factorization and curve decomposition algorithms
UNIVERSITÁ DEGLI STUDI DI TORINO FACOLTÁ DI SCIENZE MATEMATICHE FISICHE E NATURALI UNIVERSITÉ DE NICE SOPHIA ANTIPOLIS FACULTÉ DES SCIENCES DE NICE THÈSE DE DOCTORAT pour l obtention du titre de Dottore
More informationFinite fields, randomness and complexity. Swastik Kopparty Rutgers University
Finite fields, randomness and complexity Swastik Kopparty Rutgers University This talk Three great problems: Polynomial factorization Epsilon-biased sets Function uncorrelated with low-degree polynomials
More informationEfficient Multivariate Factorization Over Finite Fields
Efficient Multivariate Factorization Over Finite Fields Laurent Bernardin 1 and Michael B. Monagan 2 I Ifistitut ffir Wissenschaftliches Rechnen ETH Zfirich, Switzerland bernardin@inf, etl~. ch 2 Center
More informationComputing the Monodromy Group of a Plane Algebraic Curve Using a New Numerical-modular Newton-Puiseux Algorithm
Computing the Monodromy Group of a Plane Algebraic Curve Using a New Numerical-modular Newton-Puiseux Algorithm Poteaux Adrien XLIM-DMI UMR CNRS 6172 Université de Limoges, France SNC'07 University of
More informationFast Multivariate Power Series Multiplication in Characteristic Zero
Fast Multivariate Power Series Multiplication in Characteristic Zero Grégoire Lecerf and Éric Schost Laboratoire GAGE, École polytechnique 91128 Palaiseau, France E-mail: lecerf,schost@gage.polytechnique.fr
More informationGalois theory (Part II)( ) Example Sheet 1
Galois theory (Part II)(2015 2016) Example Sheet 1 c.birkar@dpmms.cam.ac.uk (1) Find the minimal polynomial of 2 + 3 over Q. (2) Let K L be a finite field extension such that [L : K] is prime. Show that
More informationAlgorithms for Solving Linear Differential Equations with Rational Function Coefficients
Algorithms for Solving Linear Differential Equations with Rational Function Coefficients Erdal Imamoglu Department of Mathematics Florida State University May 25, 2017 1 / 37 1 Introduction 2 Formal Solutions,
More informationThe complexity of factoring univariate polynomials over the rationals
The complexity of factoring univariate polynomials over the rationals Mark van Hoeij Florida State University ISSAC 2013 June 26, 2013 Papers [Zassenhaus 1969]. Usually fast, but can be exp-time. [LLL
More informationDivision of Trinomials by Pentanomials and Orthogonal Arrays
Division of Trinomials by Pentanomials and Orthogonal Arrays School of Mathematics and Statistics Carleton University daniel@math.carleton.ca Joint work with M. Dewar, L. Moura, B. Stevens and Q. Wang
More informationLooking back at lattice-based cryptanalysis
September 2009 Lattices A lattice is a discrete subgroup of R n Equivalently, set of integral linear combinations: α 1 b1 + + α n bm with m n Lattice reduction Lattice reduction looks for a good basis
More informationQuasi-reducible Polynomials
Quasi-reducible Polynomials Jacques Willekens 06-Dec-2008 Abstract In this article, we investigate polynomials that are irreducible over Q, but are reducible modulo any prime number. 1 Introduction Let
More informationRational Univariate Reduction via Toric Resultants
Rational Univariate Reduction via Toric Resultants Koji Ouchi 1,2 John Keyser 1 Department of Computer Science, 3112 Texas A&M University, College Station, TX 77843-3112, USA Abstract We describe algorithms
More informationMath 603, Spring 2003, HW 6, due 4/21/2003
Math 603, Spring 2003, HW 6, due 4/21/2003 Part A AI) If k is a field and f k[t ], suppose f has degree n and has n distinct roots α 1,..., α n in some extension of k. Write Ω = k(α 1,..., α n ) for the
More informationFactoring bivariate polynomials using adjoints
Factoring bivariate polynomials using adjoints Martin Weimann Ricam, Austrian Academy of Sciences, Altenbergerstrasse 69, A-4040 Linz, Austria Abstract We relate factorization of bivariate polynomials
More informationDiscrete Math, Fourteenth Problem Set (July 18)
Discrete Math, Fourteenth Problem Set (July 18) REU 2003 Instructor: László Babai Scribe: Ivona Bezakova 0.1 Repeated Squaring For the primality test we need to compute a X 1 (mod X). There are two problems
More informationThe Berlekamp algorithm
The Berlekamp algorithm John Kerl University of Arizona Department of Mathematics 29 Integration Workshop August 6, 29 Abstract Integer factorization is a Hard Problem. Some cryptosystems, such as RSA,
More informationFast Absolute Irreducibility Testing via Newton Polytopes
Fast Absolute Irreducibility Testing via Newton Polytopes Shuhong Gao and Alan G.B. Lauder Abstract We present a polytope method to test irreducibility of random sparse polynomials over an arbitrary field,
More informationCOMPUTER ARITHMETIC. 13/05/2010 cryptography - math background pp. 1 / 162
COMPUTER ARITHMETIC 13/05/2010 cryptography - math background pp. 1 / 162 RECALL OF COMPUTER ARITHMETIC computers implement some types of arithmetic for instance, addition, subtratction, multiplication
More informationFactorization in Integral Domains II
Factorization in Integral Domains II 1 Statement of the main theorem Throughout these notes, unless otherwise specified, R is a UFD with field of quotients F. The main examples will be R = Z, F = Q, and
More informationAlgorithms for exact (dense) linear algebra
Algorithms for exact (dense) linear algebra Gilles Villard CNRS, Laboratoire LIP ENS Lyon Montagnac-Montpezat, June 3, 2005 Introduction Problem: Study of complexity estimates for basic problems in exact
More informationFast Polynomial Factorization Over High Algebraic Extensions of Finite Fields
Fast Polynomial Factorization Over High Algebraic Extensions of Finite Fields Erich Kaltofen Department of Mathematics North Carolina State University Raleigh, North Carolina 27695-8205, USA kaltofen@eos.ncsu.edu
More informationEquivalence of Polynomial Identity Testing and Deterministic Multivariate Polynomial Factorization
Equivalence of Polynomial Identity Testing and Deterministic Multivariate Polynomial Factorization Swastik Kopparty Shubhangi Saraf Amir Shpilka Abstract In this paper we show that the problem of deterministically
More informationCMAT USER GUIDE K. R. MATTHEWS. 5th July 2010
CMAT USER GUIDE K. R. MATTHEWS 5th July 2010 1 A brief description of cmat cmat is an exact arithmetic calculator program, written in C and designed to run on computers which support UNIX, or 386/486 PC
More informationSHUHONG GAO, DAQING WAN AND MINGSHENG WANG
PRIMARY DECOMPOSITION OF ZERO-DIMENSIONAL IDEALS OVER FINITE FIELDS SHUHONG GAO, DAQING WAN AND MINGSHENG WANG Abstract. A new algorithm is presented for computing primary decomposition of zero-dimensional
More informationAn Algorithm for Approximate Factorization of Bivariate Polynomials 1)
MM Research Preprints, 402 408 MMRC, AMSS, Academia Sinica No. 22, December 2003 An Algorithm for Approximate Factorization of Bivariate Polynomials 1) Zhengfeng Yang and Lihong Zhi 2) Abstract. In this
More informationThe 70th William Lowell Putnam Mathematical Competition Saturday, December 5, 2009
The 7th William Lowell Putnam Mathematical Competition Saturday, December 5, 9 A1 Let f be a real-valued function on the plane such that for every square ABCD in the plane, f(a) + f(b) + f(c) + f(d) =.
More informationGalois Theory TCU Graduate Student Seminar George Gilbert October 2015
Galois Theory TCU Graduate Student Seminar George Gilbert October 201 The coefficients of a polynomial are symmetric functions of the roots {α i }: fx) = x n s 1 x n 1 + s 2 x n 2 + + 1) n s n, where s
More informationMultiplicative Order of Gauss Periods
Multiplicative Order of Gauss Periods Omran Ahmadi Department of Electrical and Computer Engineering University of Toronto Toronto, Ontario, M5S 3G4, Canada oahmadid@comm.utoronto.ca Igor E. Shparlinski
More informationBasic Algorithms in Number Theory
Basic Algorithms in Number Theory Algorithmic Complexity... 1 Basic Algorithms in Number Theory Francesco Pappalardi Discrete Logs, Modular Square Roots & Euclidean Algorithm. July 20 th 2010 Basic Algorithms
More informationAlgebraic Factorization and GCD Computation
Chapter 1 Algebraic Factorization and GCD Computation Lihong Zhi This chapter describes several algorithms for factorization and GCD computation of polynomials over algebraic extension fields. These algorithms
More informationThree Ways to Test Irreducibility
Three Ways to Test Irreducibility Richard P. Brent Australian National University joint work with Paul Zimmermann INRIA, Nancy France 12 Feb 2009 Outline Polynomials over finite fields Irreducibility criteria
More informationAdvanced code-based cryptography. Daniel J. Bernstein University of Illinois at Chicago & Technische Universiteit Eindhoven
Advanced code-based cryptography Daniel J. Bernstein University of Illinois at Chicago & Technische Universiteit Eindhoven Lattice-basis reduction Define L = (0; 24)Z + (1; 17)Z = {(b; 24a + 17b) : a;
More informationLECTURE NOTES IN CRYPTOGRAPHY
1 LECTURE NOTES IN CRYPTOGRAPHY Thomas Johansson 2005/2006 c Thomas Johansson 2006 2 Chapter 1 Abstract algebra and Number theory Before we start the treatment of cryptography we need to review some basic
More informationThree Ways to Test Irreducibility
Outline Three Ways to Test Irreducibility Richard P. Brent Australian National University joint work with Paul Zimmermann INRIA, Nancy France 8 Dec 2008 Polynomials over finite fields Irreducibility criteria
More informationPublic-key Cryptography: Theory and Practice
Public-key Cryptography Theory and Practice Department of Computer Science and Engineering Indian Institute of Technology Kharagpur Chapter 2: Mathematical Concepts Divisibility Congruence Quadratic Residues
More informationPolynomials over finite fields. Algorithms and Randomness
Polynomials over Finite Fields: Algorithms and Randomness School of Mathematics and Statistics Carleton University daniel@math.carleton.ca AofA 10, July 2010 Introduction Let q be a prime power. In this
More informationA BRIEF INTRODUCTION TO LOCAL FIELDS
A BRIEF INTRODUCTION TO LOCAL FIELDS TOM WESTON The purpose of these notes is to give a survey of the basic Galois theory of local fields and number fields. We cover much of the same material as [2, Chapters
More informationMathematics for Cryptography
Mathematics for Cryptography Douglas R. Stinson David R. Cheriton School of Computer Science University of Waterloo Waterloo, Ontario, N2L 3G1, Canada March 15, 2016 1 Groups and Modular Arithmetic 1.1
More informationSums of Consecutive Perfect Powers is Seldom a Perfect Power
Sums of Consecutive Perfect Powers is Seldom a Perfect Power Journées Algophantiennes Bordelaises 2017, Université de Bordeaux June 7, 2017 A Diophantine Equation Question x k + (x + 1) k + + (x + d 1)
More informationParity of the Number of Irreducible Factors for Composite Polynomials
Parity of the Number of Irreducible Factors for Composite Polynomials Ryul Kim Wolfram Koepf Abstract Various results on parity of the number of irreducible factors of given polynomials over finite fields
More informationALGEBRA EXERCISES, PhD EXAMINATION LEVEL
ALGEBRA EXERCISES, PhD EXAMINATION LEVEL 1. Suppose that G is a finite group. (a) Prove that if G is nilpotent, and H is any proper subgroup, then H is a proper subgroup of its normalizer. (b) Use (a)
More informationChapter 4. Greatest common divisors of polynomials. 4.1 Polynomial remainder sequences
Chapter 4 Greatest common divisors of polynomials 4.1 Polynomial remainder sequences If K is a field, then K[x] is a Euclidean domain, so gcd(f, g) for f, g K[x] can be computed by the Euclidean algorithm.
More information2 Multi-point evaluation in higher dimensions tion and interpolation problems in several variables; as an application, we improve algorithms for multi
Multi-point evaluation in higher dimensions Joris van der Hoeven Laboratoire d'informatique UMR 7161 CNRS cole polytechnique 91128 Palaiseau Cedex France Email: vdhoeven@lix.polytechnique.fr Web: http://www.lix.polytechnique.fr/~vdhoeven
More informationFast polynomial factorization and modular composition
Fast polynomial factorization and modular composition Kiran S. Kedlaya MIT Christopher Umans Caltech June 13, 2011 Abstract We obtain randomized algorithms for factoring degree n univariate polynomials
More informationFIELD THEORY. Contents
FIELD THEORY MATH 552 Contents 1. Algebraic Extensions 1 1.1. Finite and Algebraic Extensions 1 1.2. Algebraic Closure 5 1.3. Splitting Fields 7 1.4. Separable Extensions 8 1.5. Inseparable Extensions
More informationFactoring Polynomials with Rational Coecients. Kenneth Giuliani
Factoring Polynomials with Rational Coecients Kenneth Giuliani 17 April 1998 1 Introduction Factorization is a problem well-studied in mathematics. Of particular focus is factorization within unique factorization
More information1 The Fundamental Theorem of Arithmetic. A positive integer N has a unique prime power decomposition. Primality Testing. and. Integer Factorisation
1 The Fundamental Theorem of Arithmetic A positive integer N has a unique prime power decomposition 2 Primality Testing Integer Factorisation (Gauss 1801, but probably known to Euclid) The Computational
More informationAlgebra. Modular arithmetic can be handled mathematically by introducing a congruence relation on the integers described in the above example.
Coding Theory Massoud Malek Algebra Congruence Relation The definition of a congruence depends on the type of algebraic structure under consideration Particular definitions of congruence can be made for
More informationReal Analysis Prelim Questions Day 1 August 27, 2013
Real Analysis Prelim Questions Day 1 August 27, 2013 are 5 questions. TIME LIMIT: 3 hours Instructions: Measure and measurable refer to Lebesgue measure µ n on R n, and M(R n ) is the collection of measurable
More informationGauss periods as low complexity normal bases
With M. Christopoulou, T. Garefalakis (Crete) and D. Panario (Carleton) July 16, 2009 Outline 1 Gauss periods as normal bases Normal bases Gauss periods 2 Traces of normal bases The trace of Gauss periods
More informationA New Polynomial Factorization Algorithm and its Implementation. Victor Shoup. Abstract
A New Polynomial Factorization Algorithm and its Implementation Victor Shoup Bellcore, 445 South St., Morristown, NJ 07960 shoup@bellcore.com Abstract We consider the problem of factoring univariate polynomials
More informationModular Las Vegas Algorithms for Polynomial Absolute Factorization
Modular Las Vegas Algorithms for Polynomial Absolute Factorization Cristina Bertone, Guillaume Chèze, André Galligo To cite this version: Cristina Bertone, Guillaume Chèze, André Galligo. Modular Las Vegas
More informationExactness in numerical algebraic computations
Exactness in numerical algebraic computations Dan Bates Jon Hauenstein Tim McCoy Chris Peterson Andrew Sommese Wednesday, December 17, 2008 MSRI Workshop on Algebraic Statstics Main goals for this talk
More informationALGEBRA HW 9 CLAY SHONKWILER
ALGEBRA HW 9 CLAY SHONKWILER 1 Let F = Z/pZ, let L = F (x, y) and let K = F (x p, y p ). Show that L is a finite field extension of K, but that there are infinitely many fields between K and L. Is L =
More informationRings in Coding Theory
Rings in Coding Theory Steven T. Dougherty July 3, 2013 Cyclic Codes Cyclic Codes were first studied by Prange in 1957. Prange, E. Cyclic error-correcting codes in two symbols. Technical Note TN-57-103,
More informationWORKING WITH MULTIVARIATE POLYNOMIALS IN MAPLE
WORKING WITH MULTIVARIATE POLYNOMIALS IN MAPLE JEFFREY B. FARR AND ROMAN PEARCE Abstract. We comment on the implementation of various algorithms in multivariate polynomial theory. Specifically, we describe
More informationAPolynomial-Time Reduction from Bivariate to Univariate Integral Polynomial Factorization * by Erich Kaltofen **
APolynomial-Time Reduction from Bivariate to Univariate Integral Polynomial Factorization * by Erich Kaltofen ** Department of Computer and Inf. Sciences University of Delaware Newark, Delaware 19711 *
More informationNumber Theory. Modular Arithmetic
Number Theory The branch of mathematics that is important in IT security especially in cryptography. Deals only in integer numbers and the process can be done in a very fast manner. Modular Arithmetic
More informationMulti-point evaluation in higher dimensions
x Multi-point evaluation in higher dimensions Joris van der Hoeven Laboratoire d informatique UMR 7161 CRS École polytechnique 91128 Palaiseau Cedex France Email: vdhoeven@lix.polytechnique.fr Web: http://www.lix.polytechnique.fr/~vdhoeven
More informationGenerating Subfields
Generating Subfields joint with Marc van Hoeij, Andrew Novocin Jürgen Klüners Universität Paderborn Number Theory Conference, Bordeaux, 14th January 2013 Jürgen Klüners (Universität Paderborn) Generating
More informationChange of Ordering for Regular Chains in Positive Dimension
Change of Ordering for Regular Chains in Positive Dimension X. Dahan, X. Jin, M. Moreno Maza, É. Schost University of Western Ontario, London, Ontario, Canada. École polytechnique, 91128 Palaiseau, France.
More informationFast Parallel Absolute Irreducibility Testing *
Fast Parallel Absolute Irreducibility Testing * Erich Kaltofen University of Toronto Department of Computer Science Toronto, Ontario M5S1A4, Canada Abstract We present a fast parallel deterministic algorithm
More informationModular Methods for Solving Nonlinear Polynomial Systems
Modular Methods for Solving Nonlinear Polynomial Systems (Thesis format: Monograph) by Raqeeb Rasheed Graduate Program in Computer Science A thesis submitted in partial fulfillment of the requirements
More informationRuppert matrix as subresultant mapping
Ruppert matrix as subresultant mapping Kosaku Nagasaka Kobe University JAPAN This presentation is powered by Mathematica 6. 09 : 29 : 35 16 Ruppert matrix as subresultant mapping Prev Next 2 CASC2007slideshow.nb
More informationPrimary Decomposition
Primary Decomposition p. Primary Decomposition Gerhard Pfister pfister@mathematik.uni-kl.de Departement of Mathematics University of Kaiserslautern Primary Decomposition p. Primary Decomposition:References
More informationAn Additive Characterization of Fibers of Characters on F p
An Additive Characterization of Fibers of Characters on F p Chris Monico Texas Tech University Lubbock, TX c.monico@ttu.edu Michele Elia Politecnico di Torino Torino, Italy elia@polito.it January 30, 2009
More informationFactorization of Multivariate Polynomials Over Finite Fields
MATHEMATICS OF COMPUTATION VOLUME 45, NUMBER 171 JULY 1985. PAGES 251-261 Factorization of Multivariate Polynomials Over Finite Fields By J. von zur Gathen and E. Kaltofen* Abstract. We present a probabilistic
More informationSection V.7. Cyclic Extensions
V.7. Cyclic Extensions 1 Section V.7. Cyclic Extensions Note. In the last three sections of this chapter we consider specific types of Galois groups of Galois extensions and then study the properties of
More informationSOME PÓLYA-TYPE IRREDUCIBILITY CRITERIA FOR MULTIVARIATE POLYNOMIALS NICOLAE CIPRIAN BONCIOCAT, YANN BUGEAUD, MIHAI CIPU, AND MAURICE MIGNOTTE
SOME PÓLYA-TYPE IRREDUCIBILITY CRITERIA FOR MULTIVARIATE POLYNOMIALS NICOLAE CIPRIAN BONCIOCAT, YANN BUGEAUD, MIHAI CIPU, AND MAURICE MIGNOTTE Abstract. We provide irreducibility criteria for multivariate
More informationCounting Points on Curves using Monsky-Washnitzer Cohomology
Counting Points on Curves using Monsky-Washnitzer Cohomology Frederik Vercauteren frederik@cs.bris.ac.uk Jan Denef jan.denef@wis.kuleuven.ac.be University of Leuven http://www.arehcc.com University of
More informationComputing with polynomials: Hensel constructions
Course Polynomials: Their Power and How to Use Them, JASS 07 Computing with polynomials: Hensel constructions Lukas Bulwahn March 28, 2007 Abstract To solve GCD calculations and factorization of polynomials
More informationAn Approach to Hensel s Lemma
Irish Math. Soc. Bulletin 47 (2001), 15 21 15 An Approach to Hensel s Lemma gary mcguire Abstract. Hensel s Lemma is an important tool in many ways. One application is in factoring polynomials over Z.
More informationCourse 2316 Sample Paper 1
Course 2316 Sample Paper 1 Timothy Murphy April 19, 2015 Attempt 5 questions. All carry the same mark. 1. State and prove the Fundamental Theorem of Arithmetic (for N). Prove that there are an infinity
More informationModular Counting of Rational Points over Finite Fields
Modular Counting of Rational Points over Finite Fields Daqing Wan Department of Mathematics University of California Irvine, CA 92697-3875 dwan@math.uci.edu Abstract Let F q be the finite field of q elements,
More informationChapter 1 : The language of mathematics.
MAT 200, Logic, Language and Proof, Fall 2015 Summary Chapter 1 : The language of mathematics. Definition. A proposition is a sentence which is either true or false. Truth table for the connective or :
More informationCDM. Finite Fields. Klaus Sutner Carnegie Mellon University. Fall 2018
CDM Finite Fields Klaus Sutner Carnegie Mellon University Fall 2018 1 Ideals The Structure theorem Where Are We? 3 We know that every finite field carries two apparently separate structures: additive and
More informationSolutions of exercise sheet 11
D-MATH Algebra I HS 14 Prof Emmanuel Kowalski Solutions of exercise sheet 11 The content of the marked exercises (*) should be known for the exam 1 For the following values of α C, find the minimal polynomial
More informationProblem 1A. Find the volume of the solid given by x 2 + z 2 1, y 2 + z 2 1. (Hint: 1. Solution: The volume is 1. Problem 2A.
Problem 1A Find the volume of the solid given by x 2 + z 2 1, y 2 + z 2 1 (Hint: 1 1 (something)dz) Solution: The volume is 1 1 4xydz where x = y = 1 z 2 This integral has value 16/3 Problem 2A Let f(x)
More informationx = π m (a 0 + a 1 π + a 2 π ) where a i R, a 0 = 0, m Z.
ALGEBRAIC NUMBER THEORY LECTURE 7 NOTES Material covered: Local fields, Hensel s lemma. Remark. The non-archimedean topology: Recall that if K is a field with a valuation, then it also is a metric space
More informationBasic elements of number theory
Cryptography Basic elements of number theory Marius Zimand By default all the variables, such as a, b, k, etc., denote integer numbers. Divisibility a 0 divides b if b = a k for some integer k. Notation
More informationBasic elements of number theory
Cryptography Basic elements of number theory Marius Zimand 1 Divisibility, prime numbers By default all the variables, such as a, b, k, etc., denote integer numbers. Divisibility a 0 divides b if b = a
More informationDeterministic Polynomial Time Equivalence between Factoring and Key-Recovery Attack on Takagi s RSA
Deterministic Polynomial Time Equivalence between Factoring and Key-Recovery Attack on Takagi s RSA Noboru Kunihiro 1 and Kaoru Kurosawa 2 1 The University of Electro-Communications, Japan kunihiro@iceuecacjp
More informationPolynomials. Chapter 4
Chapter 4 Polynomials In this Chapter we shall see that everything we did with integers in the last Chapter we can also do with polynomials. Fix a field F (e.g. F = Q, R, C or Z/(p) for a prime p). Notation
More informationField Theory Qual Review
Field Theory Qual Review Robert Won Prof. Rogalski 1 (Some) qual problems ˆ (Fall 2007, 5) Let F be a field of characteristic p and f F [x] a polynomial f(x) = i f ix i. Give necessary and sufficient conditions
More information