Elliptic Curves Modulo N
Working with elliptic curves modulo a composite, why the group law fails, and why that failure is exactly what is wanted.
Engineering articles and subject areas in the KEVOS knowledge library. 1384 pages.
Working with elliptic curves modulo a composite, why the group law fails, and why that failure is exactly what is wanted.
What an elliptic curve is, why the group structure exists, and the three distinct roles curves play in this collection.
The analytic origin of elliptic curves in elliptic integrals, and the doubly periodic functions that invert them.
Splitting a product of same-degree irreducible factors by random splitting, and the success probability.
Two systems are equivalent when their solution sets agree. The three equation operations, the theorem that they preserve solutions, and why the scalar must be non-zero.
Reed-Solomon codes, their distance property, and decoding by rational function reconstruction.
Primes that divide the index for every choice of defining polynomial, why they exist, and what they force computationally.
Euclid's algorithm for greatest common divisors, its correctness, and the Fibonacci worst case that bounds its iteration count.
The Euclidean algorithm for polynomial gcds, its degree-based termination, and coefficient growth over the rationals.
Euler's totient function: its definition, multiplicativity, closed form from the prime factorisation, and computational status.
A catalogue of vector spaces: column vectors, matrices, polynomials, infinite sequences, functions and the trivial space, plus non-examples that fail closure.
Every square matrix has at least one eigenvalue: the determinant-free proof using a Krylov sequence, an annihilating polynomial and its linear factors over the complex field.
Expectation, variance, their algebraic properties and their use in analysing randomised algorithms.
Effective, fully explicit bounds on the prime counting function and the nth prime, usable directly in algorithm analysis.
Extended echelon form: augmenting a matrix with an identity block and reducing to obtain the submatrices B, C, J, K and L, their properties, and the generalised inverse relation…
Choosing the factor base for class group computation, the smoothness trade-off, and how base size interacts with the linear algebra.
The polynomial-time equivalence between factoring a modulus, computing phi, and recovering an RSA private exponent.
Factoring polynomials whose coefficients lie in a number field, by reduction to the rational case via norms.
The modular-lift-recombine pipeline, the exponential recombination problem, and the LLL-based algorithm that makes factorisation polynomial time.
Karatsuba multiplication and the divide-and-conquer family that reduces the exponent below two.
Subquadratic polynomial multiplication by Karatsuba and FFT methods, and the crossover behaviour.
Yun's algorithm and other improvements to squarefree decomposition, and their cost advantages.
The Fermat test, its failure on Carmichael numbers, and the strong pseudoprime test that repairs it.
Fermat's little theorem, Euler's generalisation, and their role as the foundation of primality testing and public-key cryptography.
Testing whether two number fields are isomorphic, computing the isomorphisms, and constructing the normal closure.
Locating a generator of Z_p*, the test based on the factorisation of p-1, and the density of generators.
Locating a generator of a cyclic group, why the search is easy but verification requires a factorisation, and the deterministic gap.
Enumeration and reduction-based methods for finding short lattice vectors, and where the exact shortest vector is genuinely needed.
Selecting representations and algorithms for real finite field workloads, with the operation mixes that arise in factoring, decomposition and point counting.
Representing elements of a finite field as polynomials modulo an irreducible, choosing the modulus, and the trade-offs against logarithmic and normal bases.
Multiplication with reduction, inversion by extended Euclid or by exponentiation, and the Itoh-Tsujii method for extension fields.
The characteristic of a finite field, why its order is a prime power, and the prime subfield.
Finite sample spaces, probability distributions, events and the basic laws governing them.
The geometric waiting time, its expectation and tail, and its role as the model for repeat-until-success algorithms.
The formal derivative as an algebraic operation, its rules, and its use in detecting repeated factors.
Formal Laurent series, the field of fractions of the power series ring, and the valuation structure.
Formal power series, their arithmetic, invertibility criterion, and use as generating functions.
How this collection is organised, how to read it, and notes on the source material and its treatment.
Complete determination of Galois groups in degrees three and four, where the discriminant and one cubic resolvent decide everything.
Determining Galois groups in degree five, where solvability by radicals first fails and the resolvent degrees grow.
Degrees six and seven, where the number of candidate groups and the resolvent degrees make careful strategy essential.
Characters, Gauss sums and Jacobi sums, and the properties that make them useful for primality testing.
Gaussian elimination over a field, its complexity, pivoting, and its role as the bottleneck in sieve algorithms.
Exact Gaussian elimination, pivoting for entry growth rather than stability, and the fraction-free Bareiss variant.
Elimination over a finite field, structured methods for very large sparse systems, and why the linear algebra stage limits sieving methods.
Field extensions, degree, algebraic elements and minimal polynomials.
Producing a uniformly random integer together with its complete factorisation, in polynomial time, without factoring.
Generating a prime of exactly k bits, the density in that range, and the constraints imposed by cryptographic use.