Subexponential Discrete Logarithm Algorithms
Index calculus for discrete logarithms in Z_p*, its two phases, and the precomputation asymmetry it creates.
Engineering articles and subject areas in the KEVOS knowledge library. 2176 pages.
Index calculus for discrete logarithms in Z_p*, its two phases, and the precomputation asymmetry it creates.
Factoring by congruences of squares, the relation collection and linear algebra phases, and the resulting subexponential cost.
The subfield lattice of a finite field, its correspondence with divisors, and the uniqueness of each subfield.
Subgroups, the subgroup test, generated subgroups, and the subgroup lattice of a finite group.
Submodules, quotient modules, and the correspondence between submodules of a quotient and those of the original.
Subrings, the subring test, and the distinction between subrings and ideals.
Null space, column space, row space, left null space and span are all subspaces. The theorems, their one-line proofs, and how to recognise a subspace on sight.
What a subspace of a vector space is, why a subset inherits six axioms free of charge, and how closure, the zero vector and additive inverses are verified.
Surjective (onto) linear transformations: the defining condition, proof by carrying a symbolic right-hand side, and disproof with one unattainable vector.
How images of a spanning set span the range, why the images of a basis decide surjectivity, and why domain dimension cannot fall below codomain dimension.
Every coefficient matrix induces a linear transformation: kernels are null spaces, ranges are column spaces, and solution sets are pre-images of a vector.
The formal definition of a system of linear equations, double-subscript coefficient notation, what counts as a solution, and why the solution set is the real object of study.
Why Galois group implementations need a curated test set, what a good set covers, and how to build one.
Testing irreducibility over a finite field and constructing irreducible polynomials of prescribed degree.
Deciding quadratic residuosity modulo a prime, and why the problem is easy in this case.
Quadratic residuosity modulo prime powers and composites, the reduction by Chinese remaindering, and where the hardness enters.
The three-condition subspace test: non-empty, closed under addition, closed under scalar multiplication. Proof, worked verifications and the standard counterexamples.
The AKS algorithm in full, its correctness argument, complexity, and why it is not used in practice.
The endomorphism algebra of a vector space, minimal and characteristic polynomials, and the module view of a linear operator.
Shanks' baby step giant step algorithm, its square-root running time, and the time-memory trade-off it embodies.
The Baillie-PSW test combining a strong base-two test with a strong Lucas test, and its status as the practical standard.
Berlekamp's linear algebra approach to factoring over a finite field, the Berlekamp subalgebra, and when it outperforms the GCD pipeline.
The birthday problem, the square-root threshold for collisions, and its algorithmic consequences.
Decomposing any prime, including those dividing the index, by splitting the algebra of the order modulo that prime.
The change-of-basis matrix converts coordinates from one basis to another, is the representation of the identity transformation, and is always non-singular.
Computing the characteristic polynomial via Hessenberg reduction, and its role in producing minimal polynomials of algebraic numbers.
The Chinese remainder theorem as a ring isomorphism, its constructive proof, and its role in decomposing modular computation.
Representing a field element by its images under all embeddings, the analytic information this exposes, and the precision it demands.
CFRAC: generating small quadratic residues from the continued fraction expansion, and the congruence-of-squares framework it established.
The coordinatization principle: questions about linear combinations, independence and spanning in an abstract vector space can be answered in complex n-space.
A cheap modular test deciding whether an order is maximal at a given prime, without computing the maximal order.
The recursive definition of the determinant via submatrices, the 2x2 formula ad - bc, notation and cost, and why a single scalar decides whether a square matrix is singular.
Diffie-Hellman key agreement, the assumptions it rests on, and the authentication gap that makes it vulnerable alone.
The structure of the unit group, its rank from the signature, and what computing units actually requires.
ECM stage one: multiplying a point by a highly smooth scalar to reach the identity in one component.
How closely li(x) approximates pi(x), the connection to zeta zeros, and what the Riemann hypothesis would give.
The classical Euclidean algorithm, the binary variant that replaces division with shifts, and how to choose between them.
Construction of a field of any prime power order, and the proof that one exists for every such order.
Computing Bezout coefficients alongside the gcd, the recurrence for the coefficient sequences, and the size bounds that make it practical.
Computing Bezout coefficients alongside the GCD, modular inversion as its principal application, and controlling coefficient growth.
The Fermat primality test, pseudoprimes, and the Carmichael numbers that defeat it for every base.
Constructing the field of fractions of an integral domain, its universal property, and the standard examples.
The four fundamental computational problems for a number field, their dependencies, and what counts as a complete answer to each.
The null space, row space, column space and left null space of a matrix, all obtained from the two submatrices C and L of one extended echelon form reduction.
The Frobenius endomorphism, its fixed field, its order, and the Galois structure of finite field extensions.
Computing the fundamental unit of a real quadratic field by continued fractions, its connection to the Pell equation, and its size.
What computing a Galois group means, why the splitting field cannot be constructed, and the transitive group classification that makes the problem finite.
With the dimension known, a candidate set that is too large is dependent, one too small cannot span, and one of the right size needs only a single check.