arxiv: v2 [math.nt] 28 Jun 2017

Transcription

1 GEERATIG RADOM FACTORED IDEALS I UMBER FIELDS ZACHARY CHARLES arxiv: v2 [math.t] 28 Jun 207 Abstract. We resent a ranomize olynomial-time algorithm to generate an ieal an its factorization uniformly at ranom in a given number fiel. We o this by generating a ranom integer an its factorization accoring to the istribution of norms of ieals at most in the given number fiel. Using this ranomly generate norm, we can rouce a ranom factore ieal in the ring of algebraic integers uniformly at ranom among ieals with norm u to, in ranomize olynomial time. We also resent a variant of this algorithm for generating ranom factore ieals in function fiels.. Introuction We consier a generalization of the following roblem: Given an integer > 0, generate an integer in [, ] uniformly at ranom, along with its rime factorization, in olynomial time. Since there are currently no known olyonmial time factorization algorithms, we cannot simly generate an integer an factor it. Instea, we can generate the rime factorization uniformly at ranom. In his thesis, Bach gave a ranomize olynomial time metho to uniformly rouce a factore integer in [,] [2]. Bach s metho uses only an execte number of log 2 rimality tests in [,] [3]. Since we can test for rimality in olynomial time by the work of Agrawal, Kayal, an Saxena [], Bach s algorithm runs in ranomize olynomial time. In 2003, Kalai gave another metho for oing this using a concetually simler but slower metho. Kalai s algorithm uses an execte number of Olog 2 rimality tests [7]. In 206, Lebowitz-Lockar an Pomerance gave a variant of Kalai s algorithm to rouce ranom factore elements on Z[i] with norm at most [9]. This aer gives a generalization of these algorithms that will rouce ranom factore ieals in O K for any number fiel K. The metho given will be olynomial in an the egree, where we fix an assume tens to infinity. We first iscuss Kalai s algorithm an give a brief analysis. We then use these ieas to generate, in olynomial time, an integer in [, ] accoring to the istribution of norms of iealsino K. Wetheniscuss howtousethisalgorithmtorouceranomfactoreieals of O K with norm u to uniformly at ranom using Olog 2 ++ rimality tests. This algorithm is then moifie to generate ranom factore ieals in function fiels using Olog 2 ++ rimality tests. While the algorithm escribe by Agrawal, Kayal, an Saxena runs in Olog 5/2, Lenstra an Pomerance later eveloe a rimality testing algorithm with run time Olog 6 [0]. Using the latter algorithm, our algorithms for generating ranom factore ieals in number fiels an function fiels have execte run times that are Olog Kalai s Algorithm In his 2003 aer [7], Kalai resents the following algorithm: The author woul like to thank Eric Bach for his invaluable avice, suggestions, an encouragement. The author was suorte by the ational Science Founation grant DMS

2 GEERATIG RADOM FACTORED IDEALS I UMBER FIELDS 2 Algorithm. Inut: A ositive integer. Outut: A ositive integer r [, ] an its rime factorization, rouce accoring to a uniform istribution.. Generate a sequence s s 2... s l = where s {,...,},s i+ {,...,s i } are chosen uniformly at ranom. Sto when s j =. 2. Let r be the rouct of the rime s i s. 3. If r outut r with robability r. 4. If r > or we o not accet r, return to ste. Let be a rime number. Then there is a first number s i rouce in the range {,2,...,}. It is chosen uniformly at ranom, so the robability that s i = is. Generating e factors then occurs with robability. The robability of oututting e a given r is then: [ r Pr r = ] vr = r vr n = r r = M HereM = /. Therefore, ifthealgorithmterminates, itrouces r anits rime factorization with robability. Moreover, the robability that Kalai s algorithm terminates after a single roun is M. We therefore exect M trials before we outut a number. We now show that the execte number of rimality tests is Olog 2. ote that given some s i >, the execte value of s i+ is s i 2. Therefore, a given list s,...,s l has execte length Olog. We nee an execte number of Olog rimality tests for every roun of the algorithm. Hence, we o an execte number of OM log rimality tests overall. By Mertens theorem, M = Olog. Therefore Kalai s algorithm uses Olog 2 rimality tests in exectation before the algorithm terminates. n 3. Generating Ranom Factore orms We now give a generalization of Kalai s algorithm that rouces a ranom norm of an ieal in O K, along with its rime factorization. Let K be a number fiel of egree, an an integer satisfying << log. The algorithm will use a olynomial number of rimality tests. In orer to o so, we nee knowlege of how the rational rimes slit. In general, this is comutationally efficient for rimes not iviing the iscriminant of K []. If fx is the monic irreucible olynomial over Q etermining K, then we can etermine how slits by factoring fx moulo Z/Z. Factoring olynomials over finite fiels can be accomlishe in ranomize olynomial time [8]. The remaining rime numbers can be factore using a metho of Chistov to factor olynomials in Q in olynomial time [4]. We therefore assume we can factor rational rimes in K. For any integer r > 0, let Dr enote the number of ieals in K of norm r. Let Z be a rational rime with factorization O K = m j= e j j. Let j = f j. Fining D e can now be reuce to etermining the number of solutions to m i= c if i = e. This is an instance of the subset sum roblem. We know that e is Olog. Therefore, we can solve the subset sum roblem in Omlog oerations [5]. Since m i= e if i =, we know that

3 GEERATIG RADOM FACTORED IDEALS I UMBER FIELDS 3 m. The runtime for this becomes Olog as a result. Since Dr is multilicative, we can calculate Dr for any r relatively efficiently certainly in olynomial time. We will generate r an kee r with robability roortional to rdr. In orer to guarantee a well-efine robability, we nee to boun Dr by a factor that can be incororate in to the selection of the factors. We use the following result. Let Ωr enote the number of rime factors of r with multilicity, an let Ω r be the number of rime factors counting multilicity of r that are greater than. Proosition. Dr Ωr. Proof. ote that Dr is multilicative. This is because rime ieals in O K have norms that are owers of rime numbers []. Constructing an ieal of norm r = amounts e to constructing an ieal of norm e for each rime r. Say O K = m i= e i i for O K rime. The norm is multilicative, an since O K =, we must have m i= i e i =. Fix e. ote that D e will be at its largest when the are all istinct ie. e i = an all the i have norm. Then D e will be the number of unorere sets of e elements taken from the rime ieals. This is boune above by the number orere sets, which is given by e = Ωr. We now resent the main algorithm. For simlicity of analysis, we emonstrate the case where is even an mo. Let k Z be such that = k+. These assumtions are not necessary, but hel simlify minor etails. Algorithm 2. Inut: A ositive integer. Outut: A ranom integer in[, ]. The integer is generate accoring to the istribution of norms of ieals in O K with norm u to.. Generate lists of integers as follows. For b {,3,5,..., }, generate a list 2 s,b s 2,b... s lb,b =. We take s,b {, + b,2 + b,...,k + b}, where s,b = with robability an is any other element with robability k+ k+. Take s i+,b in {,+b,2+b,...,s i,b } as with robability with robability s i,b b+. s i,b b+ an any other element 2. Let r be the rouct of the rime s i,b. 3. For all rimes between an, o the following: Multily r by with robability, an continue to multily by with this robability until your first failure. 4. If r, kee r with robability M r ψrdr Ω r. 5. If you i not kee r, go to ste. If is o, then we take b {,3,5,..., 2}. This way we ensure that we are only icking o numbers. If is some other value mo, say = k + j for j < then we can instea o the following. Let be the smallest number above such that mo. Run stes -3 of the algorithm above with substitute for. Then run ste 4 by rejecting all r > instea. For simlicity, we will analyze the algorithm in the case that mo. Let n enote the resiue of n mo. We efine ψr as follows. Let ψr have the same factors as r, excet that for any rime r, >, relace the factor of with a factor of. ote that ψr r an they share the same rime factors, with multilicity, for 2 <.

4 We efine M r by: GEERATIG RADOM FACTORED IDEALS I UMBER FIELDS 4 M r = α 2 < + log α = log vr 4. Analysis of the algorithm We wish to show that the robability of acceting r is a well-efine robability. Let gr be the rouct of all rime factors of r, with multilicity satisfying >. ote that since Dr is multilicative, we have Dr = Dgr 2 D vr By the iscussion in section 3, D vr +v r v r. This follows from the fact that D vr is maximize when all the rimes ieals lying above are all istinct an have norm. Then D e equals the number of unorere sets of size e taken from the rime ieals lying above. Using the above we fin M r ψrdr Ω r = [ vr α D vr 2 [ ] ψr αd vr Dgr Ω r 2 [ + log log 2 ] ψr Dgr Ω r ] +v r ψr v r Dgr Ωgr Let > be an o rime with mo. Then we will rouce exactly e factors of with robability given by: e Let r be some integer at most. Recall that ψr is forme from r by relacing all rime factors r, > by +. In articular, r an ψr have the same rime ivisors for. Let Pr [s = ] < vr enote the robability that after ste 2 we have generate an integer s that is the rouct of the rime factors of r that are larger

5 GEERATIG RADOM FACTORED IDEALS I UMBER FIELDS 5 than. The robability can be worke out as follows: [ Pr s = ] vr = vr < < = vr < < vr = Ω r < < = Ω r vr ψr 2 < ote that this last ste use the fact that by efinition of ψr, we have vr 2 = vr ψr < Given any r, the robability that we generate r after ste 3 is then given by: Ω r [ vr ] vr ψr 2 2 < = Ω r vr ψr 2 M r ψrdr Ω r Ω r ψr < Finally, the robability that we accet this r is then given by: = Dr = Dr 2 2 α α 2 < vr vr vr < < ote that other than Dr, all terms een only onan. Therefore, this generates a number with robability roortional to Dr. We now show that the algorithm above runs in olynomial time, with olynomial many rimality tests an factorizations of rational rimes. Summing over all r at most, the robability that we generate an ieal is Let Z n = < r Dr 2 < α <. By the Wiener-Ikehara Tauberian theorem see [6] for reference, r Dr asymtotically aroaches C K, where C K is the resiue of the Deekin zeta function of K at. Asymtotically then, the execte number of trials is Oα Z 2 <.

6 GEERATIG RADOM FACTORED IDEALS I UMBER FIELDS 6 By irect comutation, we have: + log α = log = + log 2+ log...+ log 2log We have factors of α, so this contributes Olog 2 to the execte number of trials. ote that the term 2 < contributes a term that is boune by a constant, an is therefore O in terms of. We now wish to fin the contribution of the remaining term in the robability calculation above. Simle estimates show: Here c = < 2 have: Z c < 2 + 2< 2< + 2 2< = +. By stanar estimates, such as in [2], we 2 = Olog 2 Hence we nee Olog 2 + trials before success. Since any given list has execte length Olog, this leas to Olog 2 ++ rimality tests. We now use the above algorithm to generate ranomieals of O K, uniformly at ranom among all ieals with norm u to. As reviously state, we assume that we for any rational rime, we can fin the factorization O K = m i= e i i with i = f i. To fin an ieal of norm e, it suffices to solve, as reviously iscusse, the subset sum roblem: m c i f i = e i= Any solution to this corresons to the ieal m i= c i. Since e log an m, we can clearly fin all solutions in Olog oerations [5]. While this is not otimal, even the naive aroach is warfe by the effort neee to generate the norm. After we fin all solutions, we can then choose uniformly at ranom one of the solutions, which will give us one of the ieals of the esire norm. Therefore, the algorithm runs in a number of oerationsthatisolog 2 ++ rimalitytestsanfactorizationsofo K. Therimality testing is the ominant art of this in terms of run-time. Since we can erform rimality tests in Olog 6, this gives us a run time that is Olog overall. 5. Function Fiels The analogy between number fiels an function fiels suggests that there shoul be an analogous algorithm for function fiels. In articular, there are well-known ranomize olynomial-time algorithms for factoring over F q [t]. To generate a factore ranom olynomial in F q [t], we coul simly generate one at ranom an then factor it in ranomize olynomial time. Much more elegant ways exist that generate the factorization at ranom, the same iea use by the methos above.

7 GEERATIG RADOM FACTORED IDEALS I UMBER FIELDS 7 Therefore, we woul exect the ability to translate the algorithm above to arbitrary function fiels. Fix a function fiel K of egree an > 0. We want to generate a ranom ieal I O K with norm rt F q [t] of egree at most, along with the factorization of I. We will use the fact that we can erform rimality testing over F q [t] in olynomial time. We will also assume that for any irreucible olynomial ft F q [t], we can factor fto K in olynomial time. Since O K is a Deekin omain, this hols for all ft not iviing the iscriminant, so there are only finitely many ft that nee to be factore as a one-time oeration. As in number fiels, the main obstacle is generating the norm gt of I with robability roortional to the number of ieals with this norm. Once we can o this, then we can use our ability to factor gt over O K an solve the corresoning subset sum roblem to generate an ieal of O K uniformly at ranom with its factorization. Let g F q [t]. Then we can consier g to be a number written base q by looking at its coefficients. Let ng enote this number. Let Dg enote the number of ieals in O K with norm g. For any number n Z, using its q-ary exansion, we can form a corresoning element βn F q [t]. We resent the following algorithm for generating a norm g F q [t] with robabiity roortional to Dg. It is virtually ientical to the algorithm above, excet that our concet of rimality of a number is relace by rimality of the corresoning element β F q [t]. Algorithm 3. Inut: A ositive integer. Outut: A ranom element in F q [t] with egree at most. The olynomial is generate accoring to the istribution of norms of ieals in O K with egree of their norm at most.. Generate lists of integers as follows. For b {,3,5,..., }, generate a list 2 q + > s,b s 2,b... s lb,b =. We take s,b {,+b,2+b,...,k +b}, where s,b = with robability an is any other element with robability k+ k+. Take s i+,b in {,+b,2+b,...,s i,b } as with robability s i,b b+ an any other element with robability s i,b b+. 2. Let r be the rouct of the s i,b such that βs i,b is rime. 3. For all integers between an such that β is rime, o the following: Multily r by with robability, an continue to multily by with this robability until your first failure. 4. If r < q +, return βr with robability M r ψrdβr Ω αr q. 5. If you i not return βr, go to ste. Let nenotetheresiue ofn mo. Weefine ψrasfollows. Factorβrintorimes g i. For each g i such that ng i >, relace the factor of ng i with ng i ng i +. ote that ψr r an βr,βψr share the same factors g i such that 2 ng i. We efine M r by: M r = f F q[t], f is rime 2 nf< α nf vnf r

8 GEERATIG RADOM FACTORED IDEALS I UMBER FIELDS 8 + logq α = log q An almost ientical argument to the one above shows that this rouces r with robability roortional to Dβr. Moreover, the algorithm rouces a norm with robability g F q[t],egg Dg q g F q[t] 2 ng α ng g F q[t] <ng<q + ng ng+ We first want toanalyze g F Dg. Let q,egg D+ K enote the set of effective ivisors of V, where K is the function fiel of the rojective variety V. ote that the zeta function for K can be written as: ζ K s = q egds D D + K If we let a n enote the number of g F q [t] of egree n, then this becomes: ζ K s = n 0 Since ζ K s converges absolutely for Res > an has a simle ole at s =, the analogue of the Wiener-Ikehara Tauberian theorem for function fiels imlies that: a n = Θq n a n q ns Let Z be given by: Z = <ng<q + g rime ng ng+ ote that the execte number of trials of the algorithm is: Oα Z 2 ng g rime ng Byananalogousargumenttotheabove, wehaveatmost factorsofαwhich contribute at most 2 logq to the execte number of trials, while the last rouct in the estimate contributes an amount boune by. Therefore, it suffices to boun Z. Using a version of the rime number theorem for F q [x], one can rove in an analogous way to the roof above that Z contributes O logq2 iterations in execte value. Therefore, we require O logq 2 + trials before success in exectation. Each of the lists has execte length O logq, so we require O ++ rimality tests. 2 logq2 ote that this gives us a ranomize algorithm that is olynomial in the logarithm of the size of the inut as there are q ossible norms of the ieal to generate. Since rimality testing can be erforme in time that is O logq 6, this gives us an overall runtime that is O logq

9 GEERATIG RADOM FACTORED IDEALS I UMBER FIELDS 9 6. Further Work The algorithm above uses similar ieas to Kalai s algorithm. Bach s algorithm for generating factore integers runs in fewer rimality tests, an so one coul ask whether the ieas of Bach coul be aate to this setting in orer to reuce the number of rimality tests require. In general, one coul etermine ways to make the above algorithm run faster, in articular by reucing the number of rimality tests require. The algorithms above work for a fixe number or function fiel. In articular, their runtime is olynomial treating the egree of the fiel extension as constant. It remains an oen question whether there is an algorithm for generating ranom factore ieals that runs in olynomial time, irresective of the egree of the fiel. The methos above woul have to be altere significantly to o so, ue to their exonential eenence on the egree. There are other generalizations of this roblem that coul be consiere. Due to the natural way in which rincial ieals arise in number fiels, one coul ask for a variant of this algorithm that generates rincial ieals uniformly at ranom. Clearly we coul use the above algorithm to generate an ieal uniformly at ranom, an then only accet if it is rincial. Since this occurs with robability /h, where h is the class number, this woul result in a olynomial time algorithm rovie we ha a olynomial time way to recognize rincial ieals. Unfortunately, this is a ifficult question in arbitrary number fiels, as there are no known olynomial time algorithms to etect whether an ieal in an arbitrary number fiel is rincial. References. Maninra Agrawal, eeraj Kayal, an itin Saxena, Primes is in, Annals of mathematics 2004, Eric Bach, Analytic methos in the analysis an esign of number-theoretic algorithms, MIT ress Cambrige, Eric Bach, How to generate factore ranom numbers, SIAM Journal on Comuting 7 988, no. 2, Alexanre Chistov, Efficient factoring olynomials over local fiels an its alicatons, Proceeings of the International Congress of Mathematicians, Kyoto, Jaan, vol. 2, Sringer Verlag, August 990, Thomas H. Cormen, Cliffor Stein, Ronal L. Rivest, an Charles E. Leiserson, Introuction to algorithms, 2n e., McGraw-Hill Higher Eucation, Shikao Ikehara, An extension of lanau s theorem in the analytical theory of numbers, Journal of Mathematics an Physics 0 93, no. -4, Aam Kalai, Generating ranom factore numbers, easily, J. Crytology , Donal Knuth, Seminumerical algorithms, vol. 2, Aison-Wesley, Reaing, MA, oah Lebowitz-Lockar an Carl Pomerance, Generating ranom factore Gaussian integers, easily, Math. Com , Henrik W. Lenstra, Jr., Primality testing with gaussian erios, Proceeings of the 22 Conference Kanur on Founations of Software Technology an Theoretical Comuter Science Lonon, UK, UK, FST TCS 02, Sringer-Verlag, 2002,... James S. Milne, Algebraic number theory, 203, Available at J Barkley Rosser, Lowell Schoenfel, et al., Aroximate formulas for some functions of rime numbers, Illinois Journal of Mathematics 6 962, no., University of Wisconsin-Maison, Det. of Mathematics aress: zcharles@math.wisc.eu