Sum-Product Problem: New Generalisations and Applications

Size: px
Start display at page:

Download "Sum-Product Problem: New Generalisations and Applications"

Transcription

1 Sum-Product Problem: New Generalisations and Applications Igor E. Shparlinski Macquarie University ENS, Chaire France Telecom pour la sécurité des réseaux de télécommunications

2 1 Background Set Operations Let R be a ring. For m sets A 1,... A m R and a rational function we define the set F (X 1,..., X m ) R(X 1,..., X m ) F (A 1,..., A m ) = {F (a 1,...,a m ) is defined : We write k A and A (k) a 1 A 1,..., a m A m } for the sum and product of k copies of A, respectively.

3 2 Generic Question of Additive Combinatorics: Given several rational functions F 1,..., F n : Is at least one cardinality #F i (A 1,..., A m ) large? E.g., is max i #F i (A 1,..., A m ) substantially larger than max j #A j? Notation: and A B B A B = O(A) They allow more informative chains of relations like... now try A B = C A = O(B) = C

4 3 Sum-Product Problem The most studied case: A + A and A A Sets of Real Numbers: A IR Erdős & Szemerédi (1983) Proved: for some fixed δ > 0, max {# (A + A), # (A A)} (#A) 1+δ ; Conjectured: as #A max {# (A + A), # (A A)} (#A) 2+o(1). Solymosi (2009): (# (A + A)) 2 # (A A) (#A) 4+o(1) E.g., one can take any δ < 1/3, improving Nathanson (1997, 1/31), Ford (1998, 1/15), Elekes (1997, 1/4),...

5 4 Elekes & Ruzsa (2003): If # (A + A) (#A) then # (A A) (#A) 2+o(1) Open Question 1 What can we say about # (A + A) if # (A A) (#A)? Sets in Polynomial Rings Croot & Hart (2008): There is an absolute constant δ > 0 such that for all large sets A of monic polynomials over C # (A A) < (#A) 1+δ = # (A + A) (#A) 2.

6 5 Sets in Prime Fields: A IF p, p prime Bourgain, Katz & Tao (2003): For any fixed fixed ε > 0 there is δ > 0 such that if p ε #A p 1 ε, then max {# (A + A), # (A A)} (#A) 1+δ Bourgain, Glibichuk & Konyagin (2005): The lower bound #A p ε is not needed. Bourgain, Bukh, Garaev, Katz, Li, Shen, Tsimerman... ( ): Explicit versions: δ is an explicit function of ε; also for max {# (A + B), # (A B)}.

7 6 Current Status for max {# (A + A), # (A A)} max {# (A + A), # (A A)} (#A) 13/12, if #A p 1/2, (#A) 7/6 p 1/24+o(1), if p 1/2 #A p 35/68, (#A) 10/11 p 1/11+o(1), if p 35/68 #A p 13/20, (#A) 2 p 1/2, if p 13/20 #A p 2/3, (#A) 1/2 p 1/2, if #A p 2/3, The last bound is tight and this is the only range where a tight bound is known. Bourgain, Chang, Garaev,... ( ): Analogues for arbitrary finite fields and residue rings. Warning: Beware subfields/subrings.

8 7 Sum-Inversion Problem Sets of Real Numbers: A IR Elekes, Nathanson, Ruzsa (1999): # (A + A) # ( A ( 1) + A ( 1)) (#A) 5/2 Sets in Prime Fields: A IF p, p prime Bourgain (2006): For any ε > 0 there is δ > 0 such that if #A p 1 ε, then max { # (A + A), # ( A ( 1) + A ( 1))} (#A) 1+δ Chan & Shparlinski (2009): The method of Garaev (2007) + Bounds of Kloosterman sums: An explicit bound for #A p 1/2+ε.

9 8 Helfgott & Rudnev (2010): Explicit incidence theorem: Let P = A A IF 2 p be a set of points and let L(P) be the set of lines defined by the points from P. If #A < p 1/2 then #L(P ) (#A) 1+1/232. Together the argument of Bourgain (2006) this should almost instantly lead to an explicit lower bound on max { # (A + A), # ( A ( 1) + A ( 1))} for any A IF 2 p with #A < p 1 ε and in turn to explicit versions of some other results of Bourgain (2006). Has not been worked out yet.

10 9 Sum-Ratio Problem Sets of Real Numbers: A IR Li & Shen (2009): (# (A + A)) 2 # ( A A ( 1)) 1 4 (#A)4 Sets in Prime Fields: A IF p, p prime??? Probably Garaev s method should give something for #A p 1/2+ε

11 10 More Sets, More Operations Bourgain, Bukh, Chang, Croot, Garaev, Glibichuk, Hart, Katz, Konyagin, Li, Shen, Tsimerman ( ) A variety of results on and/or max {# (A A k ), # (A 1... A k )} max {# (A + B), #f(a, B)} Limitations of what can be true Let H be a multiplicative subgroup of IF p of order #H p 3/4+o(1). There exists m IF p such that for the set we have A = H {m + 1,..., m + p 3/4 } #A #Hp3/4 p However, for any integer k, p 1/2+o(1) max { # (k A), # ( A (k))} p 3/4+o(1).

12 11 Just One Set Sets of Real Numbers: A IR Elekes, Nathanson, Ruzsa (1999): # ( A + A ( 1)) (#A) 5/4 Garaev, Shen (2009): # (A (A + 1)) (#A) 5/4 Sets of Farey fractions of order Q Bourgain, Konyagin, Shparlinski (2008): For sets A, B of rational numbers with numerators and denominators bounded by Q #(A B) #A #B exp ( 9 log Q(log log Q) 1/2) Cilleruelo (2009): Improved the constant 9, showed that it is close to the best possible.

13 12 Open Question 2 Can we say anything interesting about #(A + B) where A, B are sets of rational numbers with numerators and denominators bounded by Q?... probably not as much as for #(A B) even if A and B are large: For and δ (0, 1) we can take q Q δ Then Since for A = B = { r qs : 1 r Q, 1 s Q/q #A = #B Q 2 δ r 1 qs 1 + r 2 qs 2 = r 1s 2 + r 2 s 1 qs 1 s 2 A + B we have r 1 s 2 + r 2 s 1 = O(Q 2 /q), we see that } #(A + B) Q2 q Q q Q q = Q4 q 3 #A #B Q δ

14 13 Sets in Prime Fields: A IF p, p prime Bourgain (2005): For any ε > 0 there is δ > 0 such that for #A p 1 ε # ( A + A ( 1)) (#A) 1+δ Garaev, Shen (2009): For A IF p with #A < p 1/2, # (A (A + 1)) (#A) 106/105+o(1). For any A IF p { # (A (A + 1)) min p#a, (#A)2 p 1/2 }. Glibichuk & Konyagin (2007) for A, B IF p with #A #B; Bourgain (2008) for any A, B IF p #(8 A B 8 A B) > 0.5 min {#A #B, p 1}

15 14 Applications Initial Applications Bourgain, Glibichuk & Konyagin (2005): Improving (the range of) Korobov (1972), Shparlinski (1991), Konyagin & Shparlinski (1998), Heath-Brown & Konyagin (1999), Konyagin (2002) on exponential sums over small subgroups of IF p Bourgain (2005): Improving (the range of) Mordell s bound on exponential sums with sparse polynomials; Canetti, Friedlander, Konyagin, Larsen, Lieman & Shparlinski (2001) on the distribution of the Diffie-Hellman triples (g x, g y, g xy ); Friedlander & Shparlinski (2001) on the distribution of the Blum-Blum-Shub pseudorandom number generator: Iterations of the power map x x e (mod m).

16 15 More Recent Applications Bourgain (2006): New bounds of short double Kloosterman sums a A b B exp(2πi(a + b) 1 /p) and improving Fouvry & Michel (1998) on exponential sums with reciprocals of primes 1/l l L l prime exp(2πil 1 /p) (based on the sum-inversion problem). Randomness extractors: Given a biased source of random bits obtain uniformly distributed bits.

17 16 Croot (2005), Bourgain (2006), Glibichuk (2006): Improving/generalising a result of Shparlinski (2002) on Erdős-Graham problem: Express every λ IF p as λ x x 1 k (mod p), 1 x 1,... x k p ε, with k k 0 (ε). Glibichuk (2006): k 0 (ε) = O(ε 2 ) improving k 0 (ε) = O(ε 3 ) obtained by Shparlinski (2002) using a different approach. Croot (2005), Bourgain (2006): Higher powers, systems of equations Shparlinski (2006): Distribution of values of the Ramanujan τ-function modulo p.

18 17 Very Recent Applications Bourgain, Ford, Konyagin & Shparlinski (2008): A bound on non-zero Fermat quotients: Define l(p) = min { a : (a p 1 1)/p 0 (mod p) }. Then l(p) (log p) 463/252+o(1) This improves Lenstra (1979), Granville (1990), Ihara (2005) who used different methods to get l(p) (log p) 2.

19 18 Bourgain, Konyagin, Pomerance & Shparlinski (2008): A bound on q g (x), the smallest x-pseudopower to base g. Those are numbers which look like powers of g modulo every p x but are not powers of g over Z. Then q g (x) exp( x) This improves Bach, Lukes, Shallit & Williams (1996) who derived q g (x) exp((1 + o(1))x) from the Chinese Remainder Theorem and the Prime Number Theorem

20 19 Cochrane & Pinner (2008): Applications of Glibichuk & Konyagin (2007) to the Waring problem modulo p: γ(k, p) = smallest integer s such that sums of kth powers of s integers represent every residue modulo p. If k 0 (mod (p 1)/2) then γ(k, p) 83k 1/2 The bound γ(k, p) k 1/2 is known as the Heilbronn conjecture. Cilleruelo, Ramana & Ramare (2009): Applications to the Sarközy problem about the gaps between consecutive elements in A A for A Z.

21 20 Balog & Broughan & Shparlinski (2009): #{x x 1 (mod p) : 1 x p} p 1/3+o(1). Elementary argument: For every d p 1, let X d be the set of solutions with gcd(x, p 1) = d (i) d x = #X d p/d; (ii) x x 1 (mod p) = x d 1 (mod p) = #X d d. Use (i) for d > p 1/2 and (ii) for d < p 1/2 = O(p 1/2+o(1) ) solutions.

22 21 Additional argument: # (X d X d ) 2p/d and # (X d X d ) d For d close to p 1/2 use the explicit bound of Bourgain & Garaev (2008) in the difference-product problem (with A A in place of A + A). More complicated argument: Balog & Broughan & Shparlinski (2009): For any a Z #{x x a (mod p) : 1 x p} p 12/23+o(1). The case of a a of large multiplicative order t p 12/23 is the bottleneck. The question has some cryptographic flavour (fixed points of the discrete logarithm map).

23 22 Chan & Shparlinski (2009): Bounds on the concentration function for solutions (x, y) of bivariate congruences. For any h, a nontrivial upper bound for the number of integer pairs in the square (x, y) [a, a + h] [b, b + h] which belong to: a modular exponential curve y g x (mod p) based on the sum-product results, thus the estimate is explicit; a modular hyperbola xy c (mod p) based on the sum-inversion results, thus the estimate is not explicit. Idea: Let Y be the set of y [b, b + h] such that y g x (mod p) with some x [a, a + h]. Clearly Y Y { h,..., h}; Y Y {g u : u {2a,..., 2a + 2h}} Use the explicit bound of Bourgain & Garaev (2008) in the difference-product problem.

24 23 Generalisations Sum-Product Problems on Elliptic Curves IE an elliptic curve over IF q Y 2 = X 3 + ax + b IE has a structure of an Abelian group (we use to denote the group operation). Variants: Shparlinski (2007): For sets A, B IE(IF q ) at least one of the sets and {x(p ) + x(q) : P A, Q B} {x(p Q) : P A, Q B} is large

25 24 Ahmadi & Shparlinski (2008): For P IE(IF q ) of order T, and sets A, B Z/T Z at least one of the sets (i) {x(ap ) + x(bp ) : a A, b B}, and {x(abp ) : a A, b B} (ii) {x(ap )x(bp ) : a A, b B}, and {x(abp ) : a A, b B}, is large

26 25 The above results are based on the idea of Garaev (2007) and are nontrivial only if max{#a, #B} q 1/2+η (or even larger in some cases). Open Question 3 Obtain nontrivial results below the square-root bound on the size.

27 26 Additive Combinatorics in Matrix Rings Noncommutativity hurts a lot..... A series of very interesting results by Bourgain & Gamburd, Chang, Helfgott,... ( ), however the progress is far behind the scalar case. Here is a concrete open problem which has a cryptographic motivation. It is posed by Maze, Monico & Rosenthal (2007) in the settings of matrices over semirings, however the IF q is a place to start. Let A, B, S be n n matrices over IF q. the set Consider M k (A, B, S) = {f(a)sg(b) : f, g IF q [X], deg f, g < k} One can assume that minimal polynomials of A and B are of degree n > k.

28 27 Clearly, we have the following trivial inequalities and #M k (A, B, S) q k #M k (A, A, A) q n. Open Question 4 Obtain a lower bound on the size of #M k (A, B, S) q (1+η)k with some fixed η > 0 for a wide class of matrices A, B and S. Some further conditions on A, B and S may also be necessary.

29 28 Links to Additive Combinatorics Let A = {f(a) : f IF q [X], deg f < k}, B = {Sg(B) : g IF q [X], deg g < k}. Clearly the cardinalities of sum sets #(A+A) = #A = q k and #(B+B) = #B = q k are small. Therefore one can expect that the cardinality of the product set #(A B) = #M k (A, B, S) is large. For sets A, B IF p, a similar statement is a very special case of a result of Bourgain (2005).

FINITE FIELDS AND APPLICATIONS Additive Combinatorics in finite fields (3 lectures)

FINITE FIELDS AND APPLICATIONS Additive Combinatorics in finite fields (3 lectures) FINITE FIELDS AND APPLICATIONS Additive Combinatorics in finite fields (3 lectures) Ana Zumalacárregui a.zumalacarregui@unsw.edu.au November 30, 2015 Contents 1 Operations on sets 1 2 Sum-product theorem

More information

On the elliptic curve analogue of the sum-product problem

On the elliptic curve analogue of the sum-product problem Finite Fields and Their Applications 14 (2008) 721 726 http://www.elsevier.com/locate/ffa On the elliptic curve analogue of the sum-product problem Igor Shparlinski Department of Computing, Macuarie University,

More information

Department of Mathematics University of California Riverside, CA

Department of Mathematics University of California Riverside, CA SOME PROBLEMS IN COMBINATORIAL NUMBER THEORY 1 Mei-Chu Chang Department of Mathematics University of California Riverside, CA 92521 mcc@math.ucr.edu dedicated to Mel Nathanson on his 60th birthday Abstract

More information

Generalized incidence theorems, homogeneous forms and sum-product estimates in finite fields arxiv: v2 [math.

Generalized incidence theorems, homogeneous forms and sum-product estimates in finite fields arxiv: v2 [math. Generalized incidence theorems, homogeneous forms and sum-product estimates in finite fields arxiv:0801.0728v2 [math.co] 31 Mar 2008 David Covert, Derrick Hart, Alex Iosevich, Doowon Koh, and Misha Rudnev

More information

arxiv:math/ v3 [math.co] 15 Oct 2006

arxiv:math/ v3 [math.co] 15 Oct 2006 arxiv:math/060946v3 [math.co] 15 Oct 006 and SUM-PRODUCT ESTIMATES IN FINITE FIELDS VIA KLOOSTERMAN SUMS DERRICK HART, ALEX IOSEVICH, AND JOZSEF SOLYMOSI Abstract. We establish improved sum-product bounds

More information

SUM-PRODUCT ESTIMATES APPLIED TO WARING S PROBLEM MOD P

SUM-PRODUCT ESTIMATES APPLIED TO WARING S PROBLEM MOD P SUM-PRODUCT ESTIMATES APPLIED TO WARING S PROBLEM MOD P TODD COCHRANE AND CHRISTOPHER PINNER Abstract. Let γ(k, p) denote Waring s number (mod p) and δ(k, p) denote the ± Waring s number (mod p). We use

More information

SUM-PRODUCT ESTIMATES IN FINITE FIELDS VIA KLOOSTERMAN SUMS

SUM-PRODUCT ESTIMATES IN FINITE FIELDS VIA KLOOSTERMAN SUMS SUM-PRODUCT ESTIMATES IN FINITE FIELDS VIA KLOOSTERMAN SUMS DERRICK HART, ALEX IOSEVICH, AND JOZSEF SOLYMOSI Abstract. We establish improved sum-product bounds in finite fields using incidence theorems

More information

Congruences involving product of intervals and sets with small multiplicative doubling modulo a prime

Congruences involving product of intervals and sets with small multiplicative doubling modulo a prime Congruences involving product of intervals and sets with small multiplicative doubling modulo a prime J. Cilleruelo and M. Z. Garaev Abstract We obtain a sharp upper bound estimate of the form Hp o(1)

More information

h-fold sums from a set with few products

h-fold sums from a set with few products h-fold sums from a set with few products Dedicated to the memory of György Elekes Ernie Croot Derrick Hart January 7, 2010 1 Introduction Before we state our main theorems, we begin with some notation:

More information

Jean Bourgain Institute for Advanced Study Princeton, NJ 08540

Jean Bourgain Institute for Advanced Study Princeton, NJ 08540 Jean Bourgain Institute for Advanced Study Princeton, NJ 08540 1 ADDITIVE COMBINATORICS SUM-PRODUCT PHENOMENA Applications to: Exponential sums Expanders and spectral gaps Invariant measures Pseudo-randomness

More information

On explicit Ramsey graphs and estimates of the number of sums and products

On explicit Ramsey graphs and estimates of the number of sums and products On explicit Ramsey graphs and estimates of the number of sums and products Pavel Pudlák Abstract We give an explicit construction of a three-coloring of K N,N in which no K r,r is monochromatic for r =

More information

arxiv: v1 [math.nt] 4 Oct 2016

arxiv: v1 [math.nt] 4 Oct 2016 ON SOME MULTIPLE CHARACTER SUMS arxiv:1610.01061v1 [math.nt] 4 Oct 2016 ILYA D. SHKREDOV AND IGOR E. SHPARLINSKI Abstract. We improve a recent result of B. Hanson (2015) on multiplicative character sums

More information

On the Divisibility of Fermat Quotients

On the Divisibility of Fermat Quotients Michigan Math. J. 59 (010), 313 38 On the Divisibility of Fermat Quotients Jean Bourgain, Kevin Ford, Sergei V. Konyagin, & Igor E. Shparlinski 1. Introduction For a prime p and an integer a the Fermat

More information

Sum-product estimates over arbitrary finite fields

Sum-product estimates over arbitrary finite fields Sum-product estimates over arbitrary finite fields Doowon Koh Sujin Lee Thang Pham Chun-Yen Shen Abstract arxiv:1805.08910v3 [math.nt] 16 Jul 2018 In this paper we prove some results on sum-product estimates

More information

EXPONENTIAL SUMS EQUIDISTRIBUTION

EXPONENTIAL SUMS EQUIDISTRIBUTION EXPONENTIAL SUMS EQUIDISTRIBUTION PSEUDORANDOMNESS (1) Exponential sums over subgroups General philosophy: multiplicative subgroups are well-distributed even if they are very small Conjecture. (M-V-W)

More information

arxiv: v1 [math.co] 7 Jul 2014

arxiv: v1 [math.co] 7 Jul 2014 Sum-ratio estimates over arbitrary finite fields Oliver Roche-Newton arxiv:1407.1654v1 [math.co] 7 Jul 2014 July 11, 2018 Abstract The aim of this note is to record a proof that the estimate max{ A+A,

More information

Research Problems in Arithmetic Combinatorics

Research Problems in Arithmetic Combinatorics Research Problems in Arithmetic Combinatorics Ernie Croot July 13, 2006 1. (related to a quesiton of J. Bourgain) Classify all polynomials f(x, y) Z[x, y] which have the following property: There exists

More information

Prime Divisors of Palindromes

Prime Divisors of Palindromes Prime Divisors of Palindromes William D. Banks Department of Mathematics, University of Missouri Columbia, MO 6511 USA bbanks@math.missouri.edu Igor E. Shparlinski Department of Computing, Macquarie University

More information

A LOWER BOUND FOR THE SIZE OF A MINKOWSKI SUM OF DILATES. 1. Introduction

A LOWER BOUND FOR THE SIZE OF A MINKOWSKI SUM OF DILATES. 1. Introduction A LOWER BOUND FOR THE SIZE OF A MINKOWSKI SUM OF DILATES Y. O. HAMIDOUNE AND J. RUÉ Abstract. Let A be a finite nonempty set of integers. An asymptotic estimate of several dilates sum size was obtained

More information

On pseudosquares and pseudopowers

On pseudosquares and pseudopowers On pseudosquares and pseudopowers Carl Pomerance Department of Mathematics Dartmouth College Hanover, NH 03755-3551, USA carl.pomerance@dartmouth.edu Igor E. Shparlinski Department of Computing Macquarie

More information

THE SUM-PRODUCT PHENOMENON IN ARBITRARY RINGS

THE SUM-PRODUCT PHENOMENON IN ARBITRARY RINGS Volume 4, Number 2, Pages 59 82 ISSN 1715-0868 THE SUM-PRODUCT PHENOMENON IN ARBITRARY RINGS TERENCE TAO Abstract. The sum-product phenomenon predicts that a finite set A in a ring R should have either

More information

On pseudosquares and pseudopowers

On pseudosquares and pseudopowers On pseudosquares and pseudopowers Carl Pomerance Department of Mathematics Dartmouth College Hanover, NH 03755-3551, USA carl.pomerance@dartmouth.edu Igor E. Shparlinski Department of Computing Macquarie

More information

Open Problems on Exponential and Character Sums

Open Problems on Exponential and Character Sums Open Problems on Exponential and Character Sums Igor E. Shparlinski Department of Computing, Macquarie University Sydney, NSW 2109, Australia igor.shparlinski@mq.edu.au May 4, 2016 1 Introduction This

More information

On the Security of Diffie Hellman Bits

On the Security of Diffie Hellman Bits On the Security of Diffie Hellman Bits Maria Isabel González Vasco and Igor E. Shparlinski Abstract. Boneh and Venkatesan have recently proposed a polynomial time algorithm for recovering a hidden element

More information

Three-variable expanding polynomials and higher-dimensional distinct distances

Three-variable expanding polynomials and higher-dimensional distinct distances Three-variable expanding polynomials and higher-dimensional distinct distances Thang Pham Le Anh Vinh Frank de Zeeuw arxiv:1612.09032v3 [math.co] 24 Feb 2017 Abstract We determine which quadratic polynomials

More information

SUM-PRODUCT ESTIMATES APPLIED TO WARING S PROBLEM OVER FINITE FIELDS

SUM-PRODUCT ESTIMATES APPLIED TO WARING S PROBLEM OVER FINITE FIELDS #A68 INTEGERS 11 (011) SUM-PRODUCT ESTIMATES APPLIED TO WARING S PROBLEM OVER FINITE FIELDS Todd Cochrane 1 Department of Mathematics, Kansas State University, Manhattan, Kansas cochrane@math.ksu.edu James

More information

arxiv: v1 [math.nt] 15 Aug 2017

arxiv: v1 [math.nt] 15 Aug 2017 Sidon sets and statistics of the ElGamal function arxiv:1708.04395v1 [math.nt] 15 Aug 2017 Lucas Boppré Niehues, Joachim von zur Gathen, Lucas Pandolfo Perin, Ana Zumalacárregui October 14, 2018 Abstract

More information

Sums and products. Carl Pomerance, Dartmouth College Hanover, New Hampshire, USA. Dartmouth Mathematics Society May 16, 2012

Sums and products. Carl Pomerance, Dartmouth College Hanover, New Hampshire, USA. Dartmouth Mathematics Society May 16, 2012 Sums and products Carl Pomerance, Dartmouth College Hanover, New Hampshire, USA Dartmouth Mathematics Society May 16, 2012 Based on joint work with P. Kurlberg, J. C. Lagarias, & A. Schinzel Let s begin

More information

ALMOST ALL PRIMES HAVE A MULTIPLE OF SMALL HAMMING WEIGHT arxiv: v1 [math.nt] 18 Feb 2016

ALMOST ALL PRIMES HAVE A MULTIPLE OF SMALL HAMMING WEIGHT arxiv: v1 [math.nt] 18 Feb 2016 ALMOST ALL PRIMES HAVE A MULTIPLE OF SMALL HAMMING WEIGHT arxiv:160.05974v1 [math.nt] 18 Feb 016 CHRISTIAN ELSHOLTZ Abstract. Recent results of Bourgain and Shparlinski imply that for almost all primes

More information

A 1935 Erdős paper on prime numbers and Euler s function

A 1935 Erdős paper on prime numbers and Euler s function A 1935 Erdős paper on prime numbers and Euler s function Carl Pomerance, Dartmouth College with Florian Luca, UNAM, Morelia 1 2 3 4 Hardy & Ramanujan, 1917: The normal number of prime divisors of n is

More information

OPEN PROBLEMS IN ADDITIVE COMBINATORICS

OPEN PROBLEMS IN ADDITIVE COMBINATORICS OPEN PROBLEMS IN ADDITIVE COMBINATORICS ERNIE CROOT AND VSEVOLOD F. LEV Abstract. A brief historical introduction to the subject of additive combinatorics and a list of challenging open problems, most

More information

Additive Combinatorics

Additive Combinatorics Additive Combinatorics arxiv:1108.3790v9 [math.co] 25 Oct 2012 with a view towards Computer Science and Cryptography An Exposition Khodakhast Bibak Department of Combinatorics and Optimization University

More information

The additive structure of the squares inside rings

The additive structure of the squares inside rings The additive structure of the squares inside rings David Cushing arxiv:1611.01570v1 [math.co] 4 Nov 016 George Stagg August 10, 018 Abstract When defining the amount of additive structure on a set it is

More information

Roots of Sparse Polynomials over a Finite Field

Roots of Sparse Polynomials over a Finite Field ANTS-XII August 30, 2016 Sparsity-Dependant Bounds f(x) = c 0 + c 1 x a 1 + c 2 x a 2 + + c t x at R[x]. f is sparse if t deg f. Descartes Rule of Signs: The number of positive, real roots of f is bounded

More information

Notes on the Bourgain-Katz-Tao theorem

Notes on the Bourgain-Katz-Tao theorem Notes on the Bourgain-Katz-Tao theorem February 28, 2011 1 Introduction NOTE: these notes are taken (and expanded) from two different notes of Ben Green on sum-product inequalities. The basic Bourgain-Katz-Tao

More information

INCOMPLETE EXPONENTIAL SUMS AND DIFFIE HELLMAN TRIPLES

INCOMPLETE EXPONENTIAL SUMS AND DIFFIE HELLMAN TRIPLES Under consideration for publication in Math. Proc. Camb. Phil. Soc. 1 INCOMPLETE EXPONENTIAL SUMS AND DIFFIE HELLMAN TRIPLES By WILLIAM D. BANKS Department of Mathematics, University of Missouri Columbia,

More information

A course on sum-product bounds

A course on sum-product bounds A course on sum-product bounds Frank de Zeeuw May 29, 2017 1 Sum-product bounds in R 2 1.1 Introduction...................................... 2 1.2 The Erdős-Szemerédi Theorem...........................

More information

Lecture notes: Algorithms for integers, polynomials (Thorsten Theobald)

Lecture notes: Algorithms for integers, polynomials (Thorsten Theobald) Lecture notes: Algorithms for integers, polynomials (Thorsten Theobald) 1 Euclid s Algorithm Euclid s Algorithm for computing the greatest common divisor belongs to the oldest known computing procedures

More information

Algebra Homework, Edition 2 9 September 2010

Algebra Homework, Edition 2 9 September 2010 Algebra Homework, Edition 2 9 September 2010 Problem 6. (1) Let I and J be ideals of a commutative ring R with I + J = R. Prove that IJ = I J. (2) Let I, J, and K be ideals of a principal ideal domain.

More information

Exponential and character sums with Mersenne numbers

Exponential and character sums with Mersenne numbers Exponential and character sums with Mersenne numbers William D. Banks Dept. of Mathematics, University of Missouri Columbia, MO 652, USA bankswd@missouri.edu John B. Friedlander Dept. of Mathematics, University

More information

CONGRUENT NUMBERS AND ELLIPTIC CURVES

CONGRUENT NUMBERS AND ELLIPTIC CURVES CONGRUENT NUMBERS AND ELLIPTIC CURVES JIM BROWN Abstract. In this short paper we consider congruent numbers and how they give rise to elliptic curves. We will begin with very basic notions before moving

More information

arxiv: v2 [math.nt] 15 May 2013

arxiv: v2 [math.nt] 15 May 2013 INFINITE SIDON SEQUENCES JAVIER CILLERUELO arxiv:09036v [mathnt] 5 May 03 Abstract We present a method to construct dense infinite Sidon sequences based on the discrete logarithm We give an explicit construction

More information

On sums and products in C[x]

On sums and products in C[x] On sums and products in C[x] Ernie Croot and Derrick Hart February 8, 2010 1 Introduction Suppose that S is a subset of a ring R (in our case, the real or complex numbers), and define S.S := {st : s, t

More information

Sums and products. Carl Pomerance, Dartmouth College Hanover, New Hampshire, USA

Sums and products. Carl Pomerance, Dartmouth College Hanover, New Hampshire, USA Sums and products Carl Pomerance, Dartmouth College Hanover, New Hampshire, USA International Number Theory Conference in Memory of Alf van der Poorten, AM 12 16 March, 2012 CARMA, the University of Newcastle

More information

NON-LINEAR COMPLEXITY OF THE NAOR REINGOLD PSEUDO-RANDOM FUNCTION

NON-LINEAR COMPLEXITY OF THE NAOR REINGOLD PSEUDO-RANDOM FUNCTION NON-LINEAR COMPLEXITY OF THE NAOR REINGOLD PSEUDO-RANDOM FUNCTION William D. Banks 1, Frances Griffin 2, Daniel Lieman 3, Igor E. Shparlinski 4 1 Department of Mathematics, University of Missouri Columbia,

More information

Sums and products. Carl Pomerance, Dartmouth College Hanover, New Hampshire, USA. Providence College Math/CS Colloquium April 2, 2014

Sums and products. Carl Pomerance, Dartmouth College Hanover, New Hampshire, USA. Providence College Math/CS Colloquium April 2, 2014 Sums and products Carl Pomerance, Dartmouth College Hanover, New Hampshire, USA Providence College Math/CS Colloquium April 2, 2014 Let s begin with products. Take the N N multiplication table. It has

More information

#A34 INTEGERS 13 (2013) A NOTE ON THE MULTIPLICATIVE STRUCTURE OF AN ADDITIVELY SHIFTED PRODUCT SET AA + 1

#A34 INTEGERS 13 (2013) A NOTE ON THE MULTIPLICATIVE STRUCTURE OF AN ADDITIVELY SHIFTED PRODUCT SET AA + 1 #A34 INTEGERS 13 (2013) A NOTE ON THE MULTIPLICATIVE STRUCTURE OF AN ADDITIVELY SHIFTED PRODUCT SET AA + 1 Steven Senger Department of Mathematics, University of Delaware, Newark, Deleware senger@math.udel.edu

More information

Szemerédi-Trotter type theorem and sum-product estimate in finite fields

Szemerédi-Trotter type theorem and sum-product estimate in finite fields Szemerédi-Trotter type theorem and sum-product estimate in finite fields arxiv:0711.4427v1 [math.co] 28 Nov 2007 Le Anh Vinh Mathematics Department Harvard University Cambridge, MA 02138, US vinh@math.harvard.edu

More information

NOTES ON FINITE FIELDS

NOTES ON FINITE FIELDS NOTES ON FINITE FIELDS AARON LANDESMAN CONTENTS 1. Introduction to finite fields 2 2. Definition and constructions of fields 3 2.1. The definition of a field 3 2.2. Constructing field extensions by adjoining

More information

arxiv: v1 [math.co] 25 Oct 2018

arxiv: v1 [math.co] 25 Oct 2018 AN IMPROVED BOUND FOR THE SIZE OF THE SET A/A+A OLIVER ROCHE-NEWTON arxiv:1810.10846v1 [math.co] 25 Oct 2018 Abstract. It is established that for any finite set of positive real numbers A, we have A/A+A

More information

On the power-free parts of consecutive integers

On the power-free parts of consecutive integers ACTA ARITHMETICA XC4 (1999) On the power-free parts of consecutive integers by B M M de Weger (Krimpen aan den IJssel) and C E van de Woestijne (Leiden) 1 Introduction and main results Considering the

More information

The ranges of some familiar arithmetic functions

The ranges of some familiar arithmetic functions The ranges of some familiar arithmetic functions Carl Pomerance Dartmouth College, emeritus University of Georgia, emeritus based on joint work with K. Ford, F. Luca, and P. Pollack and T. Freiburg, N.

More information

arxiv:math/ v1 [math.nt] 20 Mar 2007

arxiv:math/ v1 [math.nt] 20 Mar 2007 arxiv:math/0703614v1 [math.nt] 20 Mar 2007 and A SLIGHT IMPROVEMENT TO GARAEV S SUM PRODUCT ESTIMATE Nets Hawk Katz and Chun-Yen Shen Indiana University 0 Introduction Let A be a subset of F p, the field

More information

On Carmichael numbers in arithmetic progressions

On Carmichael numbers in arithmetic progressions On Carmichael numbers in arithmetic progressions William D. Banks Department of Mathematics University of Missouri Columbia, MO 65211 USA bbanks@math.missouri.edu Carl Pomerance Department of Mathematics

More information

A SUM-PRODUCT ESTIMATE IN ALGEBRAIC DIVISION ALGEBRAS OVER R. Department of Mathematics University of California Riverside, CA

A SUM-PRODUCT ESTIMATE IN ALGEBRAIC DIVISION ALGEBRAS OVER R. Department of Mathematics University of California Riverside, CA A SUM-PRODUCT ESTIMATE IN ALGEBRAIC DIVISION ALGEBRAS OVER R 1 Mei-Chu Chang Department of Mathematics University of California Riverside, CA 951 mcc@math.ucr.edu Let A be a finite subset of an integral

More information

Group Structure of Elliptic Curves over Finite Fields

Group Structure of Elliptic Curves over Finite Fields Group Structure of Elliptic Curves over Finite Fields Igor E. Shparlinski Macquarie University 2 Introduction Notation IF q = finite field of q elements. An elliptic curve IE is given by a Weierstraß equation

More information

Introduction to Modern Cryptography Recitation 3. Orit Moskovich Tel Aviv University November 16, 2016

Introduction to Modern Cryptography Recitation 3. Orit Moskovich Tel Aviv University November 16, 2016 Introduction to Modern Cryptography Recitation 3 Orit Moskovich Tel Aviv University November 16, 2016 The group: Z N Let N 2 be an integer The set Z N = a 1,, N 1 gcd a, N = 1 with respect to multiplication

More information

Chapter 4 Finite Fields

Chapter 4 Finite Fields Chapter 4 Finite Fields Introduction will now introduce finite fields of increasing importance in cryptography AES, Elliptic Curve, IDEA, Public Key concern operations on numbers what constitutes a number

More information

GROWTH IN GROUPS I: SUM-PRODUCT. 1. A first look at growth Throughout these notes A is a finite set in a ring R. For n Z + Define

GROWTH IN GROUPS I: SUM-PRODUCT. 1. A first look at growth Throughout these notes A is a finite set in a ring R. For n Z + Define GROWTH IN GROUPS I: SUM-PRODUCT NICK GILL 1. A first look at growth Throughout these notes A is a finite set in a ring R. For n Z + Define } A + {{ + A } = {a 1 + + a n a 1,..., a n A}; n A } {{ A} = {a

More information

ON CARMICHAEL NUMBERS IN ARITHMETIC PROGRESSIONS

ON CARMICHAEL NUMBERS IN ARITHMETIC PROGRESSIONS J. Aust. Math. Soc. 88 (2010), 313 321 doi:10.1017/s1446788710000169 ON CARMICHAEL NUMBERS IN ARITHMETIC PROGRESSIONS WILLIAM D. BANKS and CARL POMERANCE (Received 4 September 2009; accepted 4 January

More information

Number Theory Homework.

Number Theory Homework. Number Theory Homewor. 1. The Theorems of Fermat, Euler, and Wilson. 1.1. Fermat s Theorem. The following is a special case of a result we have seen earlier, but as it will come up several times in this

More information

On the distribution of the elliptic curve power generator

On the distribution of the elliptic curve power generator On the distribution of the elliptic curve power generator László Mérai Eötvös Loránd University Budapest 26. 06. 2012. László Mérai (Budapest) On the elliptic curve power generator 26. 06. 2012. 1 / 16

More information

On Gauss sums and the evaluation of Stechkin s constant

On Gauss sums and the evaluation of Stechkin s constant On Gauss sums and the evaluation of Stechkin s constant William D. Banks Department of Mathematics University of Missouri Columbia, MO 65211 USA bankswd@missouri.edu Igor E. Shparlinski Department of Pure

More information

Open problems in Columbia, SC

Open problems in Columbia, SC Open problems in Columbia, SC Collected by Misha Rudnev June 6, 2018 Abstract This is the list of open problems contributed by { Participants of NSF-CBMS Conference on Additive Combinatorics from a Geometric

More information

LECTURE NOTES IN CRYPTOGRAPHY

LECTURE NOTES IN CRYPTOGRAPHY 1 LECTURE NOTES IN CRYPTOGRAPHY Thomas Johansson 2005/2006 c Thomas Johansson 2006 2 Chapter 1 Abstract algebra and Number theory Before we start the treatment of cryptography we need to review some basic

More information

Primality Testing. 1 Introduction. 2 Brief Chronology of Primality Testing. CS265/CME309, Fall Instructor: Gregory Valiant

Primality Testing. 1 Introduction. 2 Brief Chronology of Primality Testing. CS265/CME309, Fall Instructor: Gregory Valiant CS265/CME309, Fall 2018. Instructor: Gregory Valiant Primality Testing [These notes may not be distributed outside this class without the permission of Gregory Valiant.] 1 Introduction Prime numbers are

More information

Difference Sets are Not Multiplicatively Closed

Difference Sets are Not Multiplicatively Closed DISCRETE ANALYSIS, 2016:17, 21 pp. www.discreteanalysisjournal.com arxiv:1602.02360v4 [math.nt] 3 Oct 2016 Difference Sets are Not Multiplicatively Closed Shkredov, I. D. Received 16 February 2016; Published

More information

WARING S NUMBER IN FINITE FIELDS JAMES ARTHUR CIPRA. B.S., Kansas State University, 2000 M.S., Kansas State University, 2004

WARING S NUMBER IN FINITE FIELDS JAMES ARTHUR CIPRA. B.S., Kansas State University, 2000 M.S., Kansas State University, 2004 WARING S NUMBER IN FINITE FIELDS by JAMES ARTHUR CIPRA B.S., Kansas State University, 2000 M.S., Kansas State University, 2004 AN ABSTRACT OF A DISSERTATION submitted in partial fulfillment of the requirements

More information

Les chiffres des nombres premiers. (Digits of prime numbers)

Les chiffres des nombres premiers. (Digits of prime numbers) Les chiffres des nombres premiers (Digits of prime numbers) Joël RIVAT Institut de Mathématiques de Marseille, UMR 7373, Université d Aix-Marseille, France. joel.rivat@univ-amu.fr soutenu par le projet

More information

= 1 2x. x 2 a ) 0 (mod p n ), (x 2 + 2a + a2. x a ) 2

= 1 2x. x 2 a ) 0 (mod p n ), (x 2 + 2a + a2. x a ) 2 8. p-adic numbers 8.1. Motivation: Solving x 2 a (mod p n ). Take an odd prime p, and ( an) integer a coprime to p. Then, as we know, x 2 a (mod p) has a solution x Z iff = 1. In this case we can suppose

More information

COMPUTER ARITHMETIC. 13/05/2010 cryptography - math background pp. 1 / 162

COMPUTER ARITHMETIC. 13/05/2010 cryptography - math background pp. 1 / 162 COMPUTER ARITHMETIC 13/05/2010 cryptography - math background pp. 1 / 162 RECALL OF COMPUTER ARITHMETIC computers implement some types of arithmetic for instance, addition, subtratction, multiplication

More information

Evidence that the Diffie-Hellman Problem is as Hard as Computing Discrete Logs

Evidence that the Diffie-Hellman Problem is as Hard as Computing Discrete Logs Evidence that the Diffie-Hellman Problem is as Hard as Computing Discrete Logs Jonah Brown-Cohen 1 Introduction The Diffie-Hellman protocol was one of the first methods discovered for two people, say Alice

More information

The ranges of some familiar arithmetic functions

The ranges of some familiar arithmetic functions The ranges of some familiar arithmetic functions Max-Planck-Institut für Mathematik 2 November, 2016 Carl Pomerance, Dartmouth College Let us introduce our cast of characters: ϕ, λ, σ, s Euler s function:

More information

SM9 identity-based cryptographic algorithms Part 1: General

SM9 identity-based cryptographic algorithms Part 1: General SM9 identity-based cryptographic algorithms Part 1: General Contents 1 Scope... 1 2 Terms and definitions... 1 2.1 identity... 1 2.2 master key... 1 2.3 key generation center (KGC)... 1 3 Symbols and abbreviations...

More information

Congruent Number Problem and Elliptic curves

Congruent Number Problem and Elliptic curves Congruent Number Problem and Elliptic curves December 12, 2010 Contents 1 Congruent Number problem 2 1.1 1 is not a congruent number.................................. 2 2 Certain Elliptic Curves 4 3 Using

More information

Szemerédi-Trotter theorem and applications

Szemerédi-Trotter theorem and applications Szemerédi-Trotter theorem and applications M. Rudnev December 6, 2004 The theorem Abstract These notes cover the material of two Applied post-graduate lectures in Bristol, 2004. Szemerédi-Trotter theorem

More information

Factoring Algorithms Pollard s p 1 Method. This method discovers a prime factor p of an integer n whenever p 1 has only small prime factors.

Factoring Algorithms Pollard s p 1 Method. This method discovers a prime factor p of an integer n whenever p 1 has only small prime factors. Factoring Algorithms Pollard s p 1 Method This method discovers a prime factor p of an integer n whenever p 1 has only small prime factors. Input: n (to factor) and a limit B Output: a proper factor of

More information

Efficient Pseudorandom Generators Based on the DDH Assumption

Efficient Pseudorandom Generators Based on the DDH Assumption Efficient Pseudorandom Generators Based on the DDH Assumption Andrey Sidorenko (Joint work with Reza Rezaeian Farashahi and Berry Schoenmakers) TU Eindhoven Outline Introduction provably secure pseudorandom

More information

A. Algebra and Number Theory

A. Algebra and Number Theory A. Algebra and Number Theory Public-key cryptosystems are based on modular arithmetic. In this section, we summarize the concepts and results from algebra and number theory which are necessary for an understanding

More information

Distinct distances between points and lines in F 2 q

Distinct distances between points and lines in F 2 q Distinct distances between points and lines in F 2 q Thang Pham Nguyen Duy Phuong Nguyen Minh Sang Claudiu Valculescu Le Anh Vinh Abstract In this paper we give a result on the number of distinct distances

More information

A field F is a set of numbers that includes the two numbers 0 and 1 and satisfies the properties:

A field F is a set of numbers that includes the two numbers 0 and 1 and satisfies the properties: Byte multiplication 1 Field arithmetic A field F is a set of numbers that includes the two numbers 0 and 1 and satisfies the properties: F is an abelian group under addition, meaning - F is closed under

More information

SUMS AND PRODUCTS ALONG SPARSE GRAPHS

SUMS AND PRODUCTS ALONG SPARSE GRAPHS SUMS AND PRODUCTS ALONG SPARSE GRAPHS NOGA ALON, OMER ANGEL, ITAI BENJAMINI, AND EYAL LUBETZKY Abstract. In their seminal paper from 1983, Erdős and Szemerédi showed that any n distinct integers induce

More information

Expansions of quadratic maps in prime fields

Expansions of quadratic maps in prime fields Expansions of quadratic maps in prime fields Mei-Chu Chang Department of Mathematics University of California, Riverside mcc@math.ucr.edu Abstract Let f(x) = ax 2 +bx+c Z[x] be a quadratic polynomial with

More information

arxiv: v2 [math.ca] 31 Jul 2007

arxiv: v2 [math.ca] 31 Jul 2007 arxiv:0707.3473v2 [math.ca] 31 Jul 2007 Averages over hyperplanes, sum-product theory in vector spaces over finite fields and the Erdős-Falconer distance conjecture Derrick Hart, Alex Iosevich, Doowon

More information

Addition sequences and numerical evaluation of modular forms

Addition sequences and numerical evaluation of modular forms Addition sequences and numerical evaluation of modular forms Fredrik Johansson (INRIA Bordeaux) Joint work with Andreas Enge (INRIA Bordeaux) William Hart (TU Kaiserslautern) DK Statusseminar in Strobl,

More information

Chapter 8. P-adic numbers. 8.1 Absolute values

Chapter 8. P-adic numbers. 8.1 Absolute values Chapter 8 P-adic numbers Literature: N. Koblitz, p-adic Numbers, p-adic Analysis, and Zeta-Functions, 2nd edition, Graduate Texts in Mathematics 58, Springer Verlag 1984, corrected 2nd printing 1996, Chap.

More information

MULTIFOLD SUMS AND PRODUCTS OVER R, AND COMBINATORIAL PROBLEMS ON SUMSETS

MULTIFOLD SUMS AND PRODUCTS OVER R, AND COMBINATORIAL PROBLEMS ON SUMSETS MULTIFOLD SUMS AND PRODUCTS OVER R, AND COMBINATORIAL PROBLEMS ON SUMSETS A Thesis Presented to The Academic Faculty by Albert Bush In Partial Fulfillment of the Requirements for the Degree Doctor of Philosophy

More information

On the parity of k-th powers modulo p

On the parity of k-th powers modulo p On the parity of k-th powers modulo p Jennifer Paulhus Kansas State University paulhus@math.ksu.edu www.math.ksu.edu/ paulhus This is joint work with Todd Cochrane and Chris Pinner of Kansas State University

More information

Material covered: Class numbers of quadratic fields, Valuations, Completions of fields.

Material covered: Class numbers of quadratic fields, Valuations, Completions of fields. ALGEBRAIC NUMBER THEORY LECTURE 6 NOTES Material covered: Class numbers of quadratic fields, Valuations, Completions of fields. 1. Ideal class groups of quadratic fields These are the ideal class groups

More information

Part II. Number Theory. Year

Part II. Number Theory. Year Part II Year 2017 2016 2015 2014 2013 2012 2011 2010 2009 2008 2007 2006 2005 2017 Paper 3, Section I 1G 70 Explain what is meant by an Euler pseudoprime and a strong pseudoprime. Show that 65 is an Euler

More information

ECEN 5022 Cryptography

ECEN 5022 Cryptography Elementary Algebra and Number Theory University of Colorado Spring 2008 Divisibility, Primes Definition. N denotes the set {1, 2, 3,...} of natural numbers and Z denotes the set of integers {..., 2, 1,

More information

On the Average Value of Divisor Sums in Arithmetic Progressions

On the Average Value of Divisor Sums in Arithmetic Progressions On the Average Value of Divisor Sums in Arithmetic Progressions William D. Banks Department of Mathematics University of Missouri Columbia, MO 65211 USA bbanks@math.missouri.edu Roger Heath-Brown Mathematical

More information

On a certain generalization of the Balog-Szemeredi-Gowers theorem

On a certain generalization of the Balog-Szemeredi-Gowers theorem On a certain generalization of the Balog-Szemeredi-Gowers theorem Ernie Croot and Evan Borenstein June 25, 2008 The Balog-Szemerédi-Gowers theorem has a rich history, and is one of the most useful tools

More information

Minal Wankhede Barsagade, Dr. Suchitra Meshram

Minal Wankhede Barsagade, Dr. Suchitra Meshram International Journal of Scientific & Engineering Research, Volume 5, Issue 4, April-2014 467 Overview of History of Elliptic Curves and its use in cryptography Minal Wankhede Barsagade, Dr. Suchitra Meshram

More information

Counting points on elliptic curves over F q

Counting points on elliptic curves over F q Counting points on elliptic curves over F q Christiane Peters DIAMANT-Summer School on Elliptic and Hyperelliptic Curve Cryptography September 17, 2008 p.2 Motivation Given an elliptic curve E over a finite

More information

Discrete Logarithm Problem

Discrete Logarithm Problem Discrete Logarithm Problem Çetin Kaya Koç koc@cs.ucsb.edu (http://cs.ucsb.edu/~koc/ecc) Elliptic Curve Cryptography lect08 discrete log 1 / 46 Exponentiation and Logarithms in a General Group In a multiplicative

More information

Outline of the Seminar Topics on elliptic curves Saarbrücken,

Outline of the Seminar Topics on elliptic curves Saarbrücken, Outline of the Seminar Topics on elliptic curves Saarbrücken, 11.09.2017 Contents A Number theory and algebraic geometry 2 B Elliptic curves 2 1 Rational points on elliptic curves (Mordell s Theorem) 5

More information

MATH 25 CLASS 21 NOTES, NOV Contents. 2. Subgroups 2 3. Isomorphisms 4

MATH 25 CLASS 21 NOTES, NOV Contents. 2. Subgroups 2 3. Isomorphisms 4 MATH 25 CLASS 21 NOTES, NOV 7 2011 Contents 1. Groups: definition 1 2. Subgroups 2 3. Isomorphisms 4 1. Groups: definition Even though we have been learning number theory without using any other parts

More information

Security Level of Cryptography Integer Factoring Problem (Factoring N = p 2 q) December Summary 2

Security Level of Cryptography Integer Factoring Problem (Factoring N = p 2 q) December Summary 2 Security Level of Cryptography Integer Factoring Problem (Factoring N = p 2 ) December 2001 Contents Summary 2 Detailed Evaluation 3 1 The Elliptic Curve Method 3 1.1 The ECM applied to N = p d............................

More information

PMATH 340 Lecture Notes on Elementary Number Theory. Anton Mosunov Department of Pure Mathematics University of Waterloo

PMATH 340 Lecture Notes on Elementary Number Theory. Anton Mosunov Department of Pure Mathematics University of Waterloo PMATH 340 Lecture Notes on Elementary Number Theory Anton Mosunov Department of Pure Mathematics University of Waterloo Winter, 2017 Contents 1 Introduction............................. 3 2 Divisibility.

More information