Exhaustive Search for the Binary Sequences of Length 2047 and 4095 with Ideal Autocorrelation

Similar documents
Math 261 Exercise sheet 2

Smarandache-Zero Divisors in Group Rings

THE CHINESE REMAINDER THEOREM. We should thank the Chinese for their wonderful remainder theorem. Glenn Stevens

Linear Complexity and Correlation of some Cyclotomic Sequences

Foundations of Arithmetic

Some Consequences. Example of Extended Euclidean Algorithm. The Fundamental Theorem of Arithmetic, II. Characterizing the GCD and LCM

5 The Rational Canonical Form

On the Binary Sequences of Period 2047 with Ideal Autocorrelation Seok-Yong Jin

Christian Aebi Collège Calvin, Geneva, Switzerland

Difference Equations

Inner Product. Euclidean Space. Orthonormal Basis. Orthogonal

Caps and Colouring Steiner Triple Systems

FACTORIZATION IN KRULL MONOIDS WITH INFINITE CLASS GROUP

18.781: Solution to Practice Questions for Final Exam

a b a In case b 0, a being divisible by b is the same as to say that

Differential Polynomials

Anti-van der Waerden numbers of 3-term arithmetic progressions.

Introduction to Algorithms

Introduction. - The Second Lyapunov Method. - The First Lyapunov Method

The internal structure of natural numbers and one method for the definition of large prime numbers

Lecture 4: Universal Hash Functions/Streaming Cont d

The Order Relation and Trace Inequalities for. Hermitian Operators

Application of Nonbinary LDPC Codes for Communication over Fading Channels Using Higher Order Modulations

Maximizing the number of nonnegative subsets

On quasiperfect numbers

Math 217 Fall 2013 Homework 2 Solutions

Finding Primitive Roots Pseudo-Deterministically

where x =(x 1 ;x 2 ;::: ;x n )[12]. The dynamcs of the Ducc map have been examned for specal cases of n n [7,17,27]. In addton, many nterestng results

Homework Notes Week 7

First day August 1, Problems and Solutions

Attacks on RSA The Rabin Cryptosystem Semantic Security of RSA Cryptology, Tuesday, February 27th, 2007 Nils Andersen. Complexity Theoretic Reduction

MATH 241B FUNCTIONAL ANALYSIS - NOTES EXAMPLES OF C ALGEBRAS

2.3 Nilpotent endomorphisms

Algebraic properties of polynomial iterates

arxiv: v1 [math.co] 12 Sep 2014

Errors for Linear Systems

Affine transformations and convexity

Construction and number of self-dual skew codes over F _p 2

On cyclic of Steiner system (v); V=2,3,5,7,11,13

SL n (F ) Equals its Own Derived Group

Example: (13320, 22140) =? Solution #1: The divisors of are 1, 2, 3, 4, 5, 6, 9, 10, 12, 15, 18, 20, 27, 30, 36, 41,

SPECIAL SUBSETS OF DIFFERENCE SETS WITH PARTICULAR EMPHASIS ON SKEW HADAMARD DIFFERENCE SETS

ON A DIOPHANTINE EQUATION ON TRIANGULAR NUMBERS

A CHARACTERIZATION OF ADDITIVE DERIVATIONS ON VON NEUMANN ALGEBRAS

DISCRIMINANTS AND RAMIFIED PRIMES. 1. Introduction A prime number p is said to be ramified in a number field K if the prime ideal factorization

Entanglement vs Discord: Who Wins?

Modeling and Simulation NETW 707

Hashing. Alexandra Stefan

Subset Topological Spaces and Kakutani s Theorem

PRIME NUMBER GENERATION BASED ON POCKLINGTON S THEOREM

COMPLEX NUMBERS AND QUADRATIC EQUATIONS

Characterizing the properties of specific binomial coefficients in congruence relations

Finite Fields and Their Applications

On the partial orthogonality of faithful characters. Gregory M. Constantine 1,2

Self-complementing permutations of k-uniform hypergraphs

On the irreducibility of a truncated binomial expansion

Geometry of Müntz Spaces

2 More examples with details

APPENDIX A Some Linear Algebra

Existence of Two Conjugate Classes of A 5 within S 6. by Use of Character Table of S 6

Section 8.3 Polar Form of Complex Numbers

Recover plaintext attack to block ciphers

On the average number of divisors of the sum of digits of squares

Exercises. 18 Algorithms

A p-adic PERRON-FROBENIUS THEOREM

Using the Minimum Set of Input Combinations to Minimize the Area of Local Routing Networks in Logic Clusters. FPGAs. Andy Ye Ryerson University

TOPICS MULTIPLIERLESS FILTER DESIGN ELEMENTARY SCHOOL ALGORITHM MULTIPLICATION

Uniqueness of Weak Solutions to the 3D Ginzburg- Landau Model for Superconductivity

Perron Vectors of an Irreducible Nonnegative Interval Matrix

CHARACTERISTICS OF COMPLEX SEPARATION SCHEMES AND AN ERROR OF SEPARATION PRODUCTS OUTPUT DETERMINATION

Department of Mathematical Sciences, Clemson University. The minimum weight of dual codes from projective planes

Calculation of time complexity (3%)

Introduction to Algorithms

Restricted divisor sums

Chapter 6. Random-Number Generation 6.1. Prof. Dr. Mesut Güneş Ch. 6 Random-Number Generation

Speeding up Computation of Scalar Multiplication in Elliptic Curve Cryptosystem

IRREDUCIBLE POLYNOMIALS OF MAXIMUM WEIGHT OMRAN AHMADI AND ALFRED MENEZES

Algorithms for factoring

The Second Anti-Mathima on Game Theory

New modular multiplication and division algorithms based on continued fraction expansion

3.1 Expectation of Functions of Several Random Variables. )' be a k-dimensional discrete or continuous random vector, with joint PMF p (, E X E X1 E X

Numerical Heat and Mass Transfer

LOW BIAS INTEGRATED PATH ESTIMATORS. James M. Calvin

THERE ARE NO POINTS OF ORDER 11 ON ELLIPTIC CURVES OVER Q.

Faster Searching by Elimination

ON THE NUMBER OF PRIMITIVE PYTHAGOREAN QUINTUPLES

Problem Set 9 Solutions

28 Finitely Generated Abelian Groups

Problem Solving in Math (Math 43900) Fall 2013

On a direct solver for linear least squares problems

Basic Number Theory. Instructor: Laszlo Babai Notes by Vincent Lucarelli and the instructor. Last revision: June 11, 2001

princeton univ. F 17 cos 521: Advanced Algorithm Design Lecture 7: LP Duality Lecturer: Matt Weinberg

APPROXIMATE PRICES OF BASKET AND ASIAN OPTIONS DUPONT OLIVIER. Premia 14

= z 20 z n. (k 20) + 4 z k = 4

An efficient algorithm for multivariate Maclaurin Newton transformation

Chowla s Problem on the Non-Vanishing of Certain Infinite Series and Related Questions

arxiv: v6 [math.nt] 23 Aug 2016

Complex Numbers, Signals, and Circuits

On the set of natural numbers

The Synchronous 8th-Order Differential Attack on 12 Rounds of the Block Cipher HyRAL

Transcription:

Exhaustve Search for the Bnary Sequences of Length 047 and 4095 wth Ideal Autocorrelaton 003. 5. 4. Seok-Yong Jn and Hong-Yeop Song. Yonse Unversty

Contents Introducton Background theory Ideal autocorrelaton Equvalence Exhaustve search Search methodology N=047 case N=4095 case Concluson: results and analyss

Introducton Sets of sequences n communcaton and cryptography Random characterstc Low correlaton: Dstngushable from shfted verson of tself and others Balanced, run, span property, etc. Ease of mplementaton Lnear Feedback Shft Regster (LFSR) sequence Securty Large Complexty, Long Perod Canddates: PN-sequences Bnary sequences wth deal autocorrelaton

Ideal Autocorrelaton Two-level autocorrelaton θ ( τ ) s T = = 0 ( ) s( ) + s( + τ ) T, τ 0 (mod T ) = r, else (τ ) θ S γ Out-of-phase autocorrelaton as low as possble n absolute value r = 0 : T=4u, for u o such sequences (crculant Hadamard conjecture ) r = - : called have an deal autocorrelaton property

Hadamard Sequence Defnton Balanced perodc bnary sequence wth deal autocorrelaton (two-level autocorrelaton wth all out-of-phase correlaton value -) Propertes Length must be 4t- for some postve nteger t. Balanced: # of s) # of 0 s) = Exstence (Not Completely Known). N=4t- s a prme. N=p(p+) s a product of twn prmes 3. N= n - for n=, 3, 4,... Conjecture: These are all (verfed up to 0,000 except 3 cases) Specal nterest: case 3 How many (truly dstnct) knd?, What constructon?, etc.

Equvalence of Hadamard Sequences S, =0,,N- : perodc bnary sequence of length N Cyclc Shfts: U = S +d s a (cyclc) d-shfts of S Decmaton: R = S t wth gcd(t, N)= s a t-decmaton of S If for two same length sequence A and B, there exst t and d such that A =B t+d for all, then A and B are equvalent. D=d, d,, d k v,k, If td = td, td,, td k = d+d =d+d, d+d,, d+d k for some t and d wth (t,v)=, then t s called a multpler of D.

Equvalence: Example Equvalence classes of Hadamard Sequences of Length 7 A B C D E A C B D E

Exhaustve Search () # of (bnary sequences of length - =047) = 047 # of (balanced bnary sequences of length 047) 045 Reducton by cyclc shfts: 045 / = 034 How to reduce canddates by decmaton? Queston: Is a decmated verson of Hadamard sequence also Hadamard sequence? Answer: Yes, due to the followng. 047 03 045 Theorem Any ( n -, n- -, n- -)-CHDS D has always as a multpler. Moreover, there s unque d such that for D =D+d, D =D. Then the characterstc sequence of D have the constant-on-the-coset property.

Exhaustve Search () Only to check sequences wth constant-on-the-coset property: S = S, for all =0,, N- #(cyclotomc cosets modular 047) = 87 87 canddates: stll mpossble!! Then for what else? Theorem (Baumert) If a (v, k, )-CDS exsts, then for every dvsor w of v, there exsts ntegers b (=0,,w-) satsfyng the followng three equatons. ) ) w = 0 w = 0 b = k b = ( k λ) + ( λv / w) ) j =,...,w, w = 0 b b j = λv / w

Procedure for Exhaustve Search. Docompose cyclotomc cosets mod n-.. Establsh & solve dophantne equatons. 3. Exclude redundant solutons usng decmaton property. 4. Construct sequences from the solutons found. Use decmaton property once agan. 5. Check deal autocorrelaton.

Coset Decomposton

Dophantne Equatons and Decmaton 047 = 3 89. w=3: 4 solutons nly solutons to be examned w=89: 88 solutons only solutons (not redundant) For one soluton set (a 0, a,, a 6 ), h 6 = h= 0 N a h h 0 5, where N h = for 6 h's Such solutons are more than 8 0 0 Total (at least) 0 30 canddates took more than fve hundred years n pentum.4ghz CPU.

Known Hadamard Sequences (length 047) s( t) = Tr( α e t ) Sequence m-sequence 3-term sequence 5-term sequence Segre hyperoval sequence Glynn type I hyperoval Glynn type II hyperoval Trace Representaton, 33, 49 3, 5, 7, 73, 4 5, 5, 05, 309, 469, 83, 39, 9, 3, 9, 73, 33, 9, 7, 49, 5, 9, 3, 9, 37, 43, 67, 69, 37, 63,, 93, 5, 3, 7, 9, 37, 49, 6, 69, 8, 93, 0, 3, 5, 39, 47, 5, 7, 73, 83

Lnear Complexty Lnear complexty of Hadamard sequences of length 047 from monomal hyperoval n projectve plane Sequence Type m HS HG HG Lnear Span 65 43 3

(4095, 047, 03)-case () Dvsor structure of 4095 9 5 7 3 9 5 7 9 5 3 9 7 3 5 7 3 9 5 9 7 9 3 5 7 5 3 7 3 9 7 5 3

(4097, 045, 03)-case () Decomposton of cyclotomc cosets mod 4095

(4097, 045, 03)-case (3) Cyclotomc cosets mod 4095: total 35 cosets 340 5 # of cosets 6 4 3 coset sze Classes of cyclotomc cosets mod 4095: 36 classes 5 6 4 4 3 5 3 # of such classes 7 4 8 8 # of cosets n class For only one soluton set (a 0, a,, a 36 ), approxmately number of choces of choosng canddates, whch s greater than total number of possbltes for - case 3 4 5 8 7 6 6 5 4 3 7 5 9 3 9 7 5 4 3 a a a a a a a a a

Summary Exhaustve search for (047, 03, 5)-CHDS Snce 047 s a product of only two dvsors (3 and 89), and s a prme, Prevous search methodology does NOT work effcently. Partal Search No more nequvalent Hadamard sequence of length 047 was found. Exhaustve Search for (4095, 047, 03)-CHDS Actually, the fnal case of the current exhaustve method may work. Stll tryng