Search

We present a variety of numerical data related to the growth of terms in aliquot sequences, iterations of the function $s(n) = \sigma(n) - n$. First, we compute the geometric mean of the ratio $s_k(n)/s_{k-1}(n)$ of $k$th iterates for $n \leq 2^{37}$ and $k=1,\dots,10.$ Second, we extend the computation of numbers not in the range of $s(n)$ (called untouchable) by Pollack and Pomerance to the bound of $2^{40}$ and use these data to compute the geometric mean of the ratio of consecutive terms limited to terms in the range of $s(n).$ Third, we give an algorithm to compute $k$-untouchable numbers ($k-1$st iterates of $s(n)$ but not $k$th iterates) along with some numerical data. Finally, inspired by earlier work of Devitt, we estimate the growth rate of terms in aliquot sequences using a Markov chain model based on data extracted from thousands of sequences., Comment: This is an Accepted Manuscript of an article published by Taylor & Francis in Experimental Mathematics on June 18, 2018, available online: https://www.tandfonline.com/doi/abs/10.1080/10586458.2018.1477077

We describe a novel type of weak cryptographic private key that can exist in any discrete logarithm based public-key cryptosystem set in a group of prime order $p$ where $p-1$ has small divisors. Unlike the weak private keys based on \textit{numerical size} (such as smaller private keys, or private keys lying in an interval) that will \textit{always} exist in any DLP cryptosystems, our type of weak private keys occurs purely due to parameter choice of $p$, and hence, can be removed with appropriate value of $p$. Using the theory of implicit group representations, we present algorithms that can determine whether a key is weak, and if so, recover the private key from the corresponding public key. We analyze several elliptic curves proposed in the literature and in various standards, giving counts of the number of keys that can be broken with relatively small amounts of computation. Our results show that many of these curves, including some from standards, have a considerable number of such weak private keys. We also use our methods to show that none of the 14 outstanding Certicom Challenge problem instances are weak in our sense, up to a certain weakness bound.

We propose an algorithm for computing an isogeny between two elliptic curves $E_1,E_2$ defined over a finite field such that there is an imaginary quadratic order $\mathcal{O}$ satisfying $\mathcal{O}\simeq \operatorname{End}(E_i)$ for $i = 1,2$. This concerns ordinary curves and supersingular curves defined over $\mathbb{F}_p$ (the latter used in the recent CSIDH proposal). Our algorithm has heuristic asymptotic run time $e^{O\left(\sqrt{\log(|\Delta|)}\right)}$ and requires polynomial quantum memory and $e^{O\left(\sqrt{\log(|\Delta|)}\right)}$ classical memory, where $\Delta$ is the discriminant of $\mathcal{O}$. This asymptotic complexity outperforms all other available method for computing isogenies. We also show that a variant of our method has asymptotic run time $e^{\tilde{O}\left(\sqrt{\log(|\Delta|)}\right)}$ while requesting only polynomial memory (both quantum and classical).

We present an improved algorithm for tabulating class groups of imaginary quadratic fields of bounded discriminant. Our method uses classical class number formulas involving theta-series to compute the group orders unconditionally for all $\Delta \not \equiv 1 \pmod{8}.$ The group structure is resolved using the factorization of the group order. The $1 \bmod 8$ case was handled using the methods of \cite{jacobson}, including the batch verification method based on the Eichler-Selberg trace formula to remove dependence on the Extended Riemann Hypothesis. Our new method enabled us to extend the previous bound of $|\Delta| < 2 \cdot 10^{11}$ to $2^{40}$. Statistical data in support of a variety conjectures is presented, along with new examples of class groups with exotic structures., Comment: 26 pages, 2 figures, to appear in Math. Comp

We present a method for tabulating all cubic function fields over $\mathbb{F}_q(t)$ whose discriminant $D$ has either odd degree or even degree and the leading coefficient of $-3D$ is a non-square in $\mathbb{F}_{q}^*$, up to a given bound $B$ on the degree of $D$. Our method is based on a generalization of Belabas' method for tabulating cubic number fields. The main theoretical ingredient is a generalization of a theorem of Davenport and Heilbronn to cubic function fields, along with a reduction theory for binary cubic forms that provides an efficient way to compute equivalence classes of binary cubic forms. The algorithm requires $O(B^4 q^B)$ field operations as $B \rightarrow \infty$. The algorithm, examples and numerical data for $q=5,7,11,13$ are included., Comment: 30 pages, minor typos corrected, extra table entries added, revamped complexity analysis of the algorithm. To appear in Mathematics of Computation

This paper presents an algorithm for generating all imaginary and unusual discriminants up to a fixed degree bound that define a quadratic function field of positive 3-rank. Our method makes use of function field adaptations of a method due to Belabas for finding quadratic number fields of high 3-rank and of a refined function field version of a theorem due to Hasse. We provide numerical data for discriminant degree up to 11 over the finite fields $\mathbb{F}_{5}, \mathbb{F}_{7}, \mathbb{F}_{11}$ and $\mathbb{F}_{13}$. A special feature of our technique is that it produces quadratic function fields of minimal genus for any given 3-rank. Taking advantage of certain $\mathbb{F}_{q}(t)$-automorphisms in conjunction with Horner's rule for evaluating polynomials significantly speeds up our algorithm in the imaginary case; this improvement is unique to function fields and does not apply to number field tabulation. These automorphisms also account for certain divisibility properties in the number of fields found with positive 3-rank. Our numerical data mostly agrees with the predicted heuristics of Friedman-Washington and partial results on the distribution of such values due to Ellenberg-Venkatesh-Westerland for quadratic function fields over the finite field $\finfldq{q}$ where $q \equiv -1 \pmod{3}$. The corresponding data for $q \equiv 1 \pmod{3}$ does not agree closely with the previously mentioned heuristics and results, but does agree more closely with some recent number field conjectures of Malle and some work in progress on proving such conjectures for function fields due to Garton., Comment: 32 pages. Improved algorithm for imaginary case, additional computational results provided, certain divisibility properties in the number of fields found explained, numerous small edits. Submitted for publication

We present an algorithm that unconditionally computes a representation of the unit group of a number field of discriminant $\Delta_K$, given a full-rank subgroup as input, in asymptotically fewer bit operations than the baby-step giant-step algorithm. If the input is assumed to represent the full unit group, for example, under the assumption of the Generalized Riemann Hypothesis, then our algorithm can unconditionally certify its correctness in expected time $O(\Delta_K^{n/(4n + 2) + \epsilon}) = O(\Delta_K^{1/4 - 1/(8n+4) + \epsilon})$ where $n$ is the unit rank., Comment: 14 pages, 4 figures