Advances in Cryptology – CRYPTO 2004
From MaRDI portal
Publication:5311533
Abstract: In this paper, we study the discrete logarithm problem in the finite fields where . The field is called a Kummer field or a Kummer extension of . It plays an important role in improving the AKS primality proving algorithm. It is known that we can efficiently construct an element with order greater than in the fields. Let be the function from integers to the sum of digits in their -ary expansions. We present an algorithm that given () finds in random polynomial time, provided that . We then show that the problem is solvable in random polynomial time for most of the exponent with . The main tool for the latter result is the Guruswami-Sudan list decoding algorithm. Built on these results, we prove that in the field , the bounded sum-of-digits discrete logarithm with respect to can be computed in random time , where is a subexponential function and is the bound on the -ary sum-of-digits of the exponent. Hence the problem is fixed parameter tractable. These results are shown to be extendible to Artin-Schreier extension where is a prime. Since every finite field has an extension of reasonable degree which is a Kummer field, our result reveals an unexpected property of the discrete logarithm problem, namely, the bounded sum-of-digits discrete logarithm problem in any given finite field becomes polynomial time solvable in certain low degree extensions.
Recommendations
- On the Bounded Sum-of-Digits Discrete Logarithm Problem in Finite Fields
- On the discrete logarithm problem in finite fields of fixed characteristic
- A note on discrete logarithms in finite fields
- Lower bounds on the linear complexity of the discrete logarithm in finite fields
- Discrete logarithms in quasi-polynomial time in finite fields of fixed characteristic
- Cryptography and Coding
- scientific article; zbMATH DE number 2127885
- Computation of discrete logarithms in an arbitrary finite field
- A short proof for explicit formulas for discrete logarithms in finite fields
- Bounds in various generalized settings of the discrete logarithm problem
Cited in
(3)
This page was built for publication: Advances in Cryptology – CRYPTO 2004
Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q5311533)