The LLL Lattice Basis Reduction Algorithm
The LLL algorithm: size reduction interleaved with swaps under the Lovasz condition, and the guarantees it provides in polynomial time.
Engineering articles and subject areas in the KEVOS knowledge library. 1397 pages.
The LLL algorithm: size reduction interleaved with swaps under the Lovasz condition, and the guarantees it provides in polynomial time.
Mapping units into a real vector space by logarithms of conjugate absolute values, and the lattice this produces.
Representing a field element by its multiplication matrix, and reading trace, norm and characteristic polynomial off that matrix.
The matrix-vector product defined as a linear combination of the columns of a matrix, the equation Ax = b for a linear system, and when equal products force equal matrices.
The maximal order problem, its reduction to a prime-by-prime question, and the factoring obstruction that limits it.
The Miller-Rabin test, the witness structure, the one-quarter bound, and why it is the practical standard.
The methods available for proving primality, their complexities, and which to use for a given size of candidate.
MPQS: using many polynomials with short intervals to keep values small, and the self-initialising variant.
The norm of a vector: definition from the moduli of its entries, its identity with the inner product, positive definiteness, unit vectors and stable computation.
The number field sieve, the current state of factoring records, and how key size recommendations follow from them.
The order of an element, its relationship to the group order, and the computational cost of determining it.
Proving primality from a partial factorisation of one less than the candidate, and the certificate this produces.
The theorem underlying maximal order computation: enlarging an order by the ring of multipliers of its radical.
Pollard's p-1 method, its dependence on the smoothness of the group order, and why that dependence is its fatal limitation.
Pollard's rho method: cycle detection in a pseudorandom sequence, the birthday bound, and Brent's improvement.
The Euclidean and extended Euclidean algorithms for polynomials over a field, and their role in inversion and interpolation.
Finding a small defining polynomial for a number field using lattice reduction on the maximal order, and why this pays for itself.
The prime number theorem, its equivalent formulations, and the logarithmic integral as the superior approximation.
The quadratic residuosity assumption, its use in probabilistic encryption, and its relationship to factoring.
The quadratic sieve: candidate generation near the square root, sieving for smoothness, and its practical range.
Finding dependencies in the relation matrix over the field with two elements, and why this stage is the practical bottleneck.
The sieving stage: identifying smooth polynomial values in bulk using logarithm accumulation rather than trial division.
The regulator as the covolume of the unit lattice, its computation, and the precision and verification it demands.
Constructing resolvent polynomials whose factorisation distinguishes candidate Galois groups, and the practical issues in using them.
The Round 2 algorithm: computing the maximal order prime by prime via radicals and rings of multipliers.
The algorithm that drives any matrix to reduced row-echelon form: pivot search, interchange, normalisation, column clearing, cost and pivoting strategy.
RSA key generation, encryption, decryption and correctness, together with the assumptions its security depends on.
Factoring via class groups of quadratic orders, and its place as the conceptual bridge to the elliptic curve method.
The classical sieve for enumerating primes, its complexity, segmented variants, and its role as a precomputation step.
The Smith normal form, its computation by alternating row and column reduction, and the invariant factors it exposes.
Linear combinations and spans in an abstract vector space: the definition, the proof that a span is always a subspace, and how membership becomes a linear system.
Representing field elements as coefficient vectors relative to a power basis or integral basis, with a common denominator.
The structure theorem decomposing every finite abelian group into cyclic factors, and its computational consequences.
The structure of Z_n* as a product of cyclic groups, the Carmichael function, and why prime moduli behave differently.
Practical considerations in running class group computations: parameter tuning, parallelism, precision management and diagnostics.
The sub-resultant remainder sequence: predicting the divisible factor at each step to keep coefficients near minimal without content computation.
Finding the subfields of a number field, by lattice methods and by linear algebra over the complex numbers.
Trace, norm and characteristic polynomial of a field element, their computation, and their use as invariants and cross-checks.
Trial division as a primality test and as a filter, its exponential cost, and the role it still plays in practice.
Trial division as the first factoring step, its cost, and Lehman's improvement on Fermat's method.
Choosing the trial division bound ahead of a probabilistic test, and the cost balance that determines it.
Content and primitive part, Gauss's lemma, and why factoring over the rationals reduces to factoring over the integers.
Unique factorisation domains, the distinction between irreducible and prime, and the standard examples and counterexamples.
Why Euclidean domains are principal ideal domains and why principal ideal domains have unique factorisation.
Unique factorisation in polynomial rings over a field, and the extension to polynomial rings over a UFD.
The fundamental theorem of arithmetic: existence and uniqueness of prime factorisation, and why the uniqueness half is the difficult one.
Proof that a matrix has exactly one reduced row-echelon form: pivot columns agree by induction, ranks agree, and rows are forced to coincide entry by entry.
The analytic inequalities, series estimates and elementary bounds relied on repeatedly in the analysis of number-theoretic algorithms.