<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>Felix&#039; Math Place &#187; discrete logarithm</title>
	<atom:link href="http://math.fontein.de/tag/discrete-logarithm/feed/" rel="self" type="application/rss+xml" />
	<link>http://math.fontein.de</link>
	<description>Focussed on, but not limited to Computational Number Theory</description>
	<lastBuildDate>Sat, 30 Jul 2011 12:35:49 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.1</generator>
		<item>
		<title>Infrastructures and Global Fields.</title>
		<link>http://math.fontein.de/infrastructures/</link>
		<comments>http://math.fontein.de/infrastructures/#comments</comments>
		<pubDate>Thu, 23 Jul 2009 05:59:40 +0000</pubDate>
		<dc:creator>Felix Fontein</dc:creator>
				<category><![CDATA[Uncategorized]]></category>
		<category><![CDATA[baby steps]]></category>
		<category><![CDATA[discrete logarithm]]></category>
		<category><![CDATA[f-representation]]></category>
		<category><![CDATA[finite abelian group]]></category>
		<category><![CDATA[finite cyclic groups]]></category>
		<category><![CDATA[function field]]></category>
		<category><![CDATA[giant steps]]></category>
		<category><![CDATA[global field]]></category>
		<category><![CDATA[infrastructure]]></category>
		<category><![CDATA[number field]]></category>

		<guid isPermaLink="false">http://math.fontein.de/?page_id=259</guid>
		<description><![CDATA[The following posts give an introduction to infrastructures and how to obtain these from global fields: The Discrete Logarithm Problem and Generalizations. One-dimensional Infrastructures. Interpreting One-dimensional Infrastructures as Groups: f-Representations. n-dimensional Infrastructures. How to Obtain Reduction Maps for n-dimensional Infrastructures. Obtaining Infrastructures from Global Fields. See also my article on infrastructures at Wikipedia.]]></description>
			<content:encoded><![CDATA[<p>The following posts give an introduction to infrastructures and how to obtain these from global fields:</p>
<ol>
<li><a href="http://math.fontein.de/forward.php?r=http://math.fontein.de/2009/07/20/the-discrete-logarithm-problem-and-generalizations/">The Discrete Logarithm Problem and Generalizations.</a></li>
<li><a href="http://math.fontein.de/forward.php?r=http://math.fontein.de/2009/07/20/one-dimensional-infrastructures/">One-dimensional Infrastructures.</a></li>
<li><a href="http://math.fontein.de/forward.php?r=http://math.fontein.de/2009/07/20/interpreting-one-dimensional-infrastructures-as-groups-f-representations/">Interpreting One-dimensional Infrastructures as Groups: f-Representations.</a></li>
<li><a href="http://math.fontein.de/forward.php?r=http://math.fontein.de/2009/07/20/n-dimensional-infrastructures/">n-dimensional Infrastructures.</a></li>
<li><a href="http://math.fontein.de/forward.php?r=http://math.fontein.de/2009/07/21/how-to-obtain-reduction-maps-for-n-dimensional-infrastructures/">How to Obtain Reduction Maps for n-dimensional Infrastructures.</a></li>
<li><a href="http://math.fontein.de/forward.php?r=http://math.fontein.de/2009/07/21/obtaining-infrastructures-from-global-fields/">Obtaining Infrastructures from Global Fields.</a></li>
</ol>
<p>See also my <a href="http://math.fontein.de/forward.php?r=http://en.wikipedia.org/wiki/Infrastructure_(number_theory)">article on infrastructures</a> at <a href="http://math.fontein.de/forward.php?r=http://en.wikipedia.org/">Wikipedia</a>.</p>
]]></content:encoded>
			<wfw:commentRss>http://math.fontein.de/infrastructures/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>The Discrete Logarithm Problem and Generalizations.</title>
		<link>http://math.fontein.de/2009/07/20/the-discrete-logarithm-problem-and-generalizations/</link>
		<comments>http://math.fontein.de/2009/07/20/the-discrete-logarithm-problem-and-generalizations/#comments</comments>
		<pubDate>Mon, 20 Jul 2009 03:44:15 +0000</pubDate>
		<dc:creator>Felix Fontein</dc:creator>
				<category><![CDATA[Algebra]]></category>
		<category><![CDATA[Cryptography]]></category>
		<category><![CDATA[discrete logarithm]]></category>
		<category><![CDATA[DLP]]></category>

		<guid isPermaLink="false">http://math.fontein.de/?p=95</guid>
		<description><![CDATA[We discuss the discrete logarithm problem, its use in cryptography, and two possible directions of generalization to other algebraic structures.]]></description>
			<content:encoded><![CDATA[<p>Let <img src='http://math.fontein.de/wp-content/latex/dfc/dfcf28d0734569a6a693bc8194de62bf-T-000000-0.png' alt='G' title='G' class='latex-inline' /> be a group and <img src='http://math.fontein.de/wp-content/latex/c97/c9742018c5575f06f59ce542b29ad79d-T-000000-0.png' alt='g \in G' title='g \in G' class='latex-inline' />. Using <a href="http://math.fontein.de/forward.php?r=http://en.wikipedia.org/wiki/Exponentiation_by_squaring">square-and-multiply techniques</a>, one can rapidly compute <img src='http://math.fontein.de/wp-content/latex/b2b/b2b63185db2f665864115cf3662e28e2-T-000000-0.png' alt='g^n' title='g^n' class='latex-inline' /> for <img src='http://math.fontein.de/wp-content/latex/72e/72e07933327508be8d2ca29128a878d7-T-000000-0.png' alt='n \in \N' title='n \in \N' class='latex-inline' /> &ndash; in fact, <img src='http://math.fontein.de/wp-content/latex/1c8/1c87f8900f9f574177418d6ae737ed5c-T-000000-0.png' alt='\calO(\log n)' title='\calO(\log n)' class='latex-inline' /> group operations suffice.</p>

<p>On the other side, the inverse question, given <img src='http://math.fontein.de/wp-content/latex/b2b/b2b63185db2f665864115cf3662e28e2-T-000000-0.png' alt='g^n' title='g^n' class='latex-inline' /> and <img src='http://math.fontein.de/wp-content/latex/b2f/b2f5ff47436671b6e533d8dc3614845d-T-000000-0.png' alt='g' title='g' class='latex-inline' />, how to find <img src='http://math.fontein.de/wp-content/latex/7b8/7b8b965ad4bca0e41ab51de7b31363a1-T-000000-0.png' alt='n' title='n' class='latex-inline' />, is in general hard. In fact, a <a href="http://math.fontein.de/forward.php?r=http://shoup.net/papers/dlbounds1.pdf">result</a> by <a href="http://math.fontein.de/forward.php?r=http://en.wikipedia.org/wiki/Victor_Shoup">Victor Shoup</a> says that for a black box group, there exists no deterministic algorithm which can find the <img src='http://math.fontein.de/wp-content/latex/7b8/7b8b965ad4bca0e41ab51de7b31363a1-T-000000-0.png' alt='n' title='n' class='latex-inline' /> in time less than <img src='http://math.fontein.de/wp-content/latex/6a3/6a36e60710aed6c3d5581ded9a7d2fcf-T-000000-0.png' alt='\calO(\sqrt{p})' title='\calO(\sqrt{p})' class='latex-inline' /> steps in any case, provided the prime <img src='http://math.fontein.de/wp-content/latex/838/83878c91171338902e0fe0fb97a8c47a-T-000000-0.png' alt='p' title='p' class='latex-inline' /> is the order of <img src='http://math.fontein.de/wp-content/latex/b2f/b2f5ff47436671b6e533d8dc3614845d-T-000000-0.png' alt='g' title='g' class='latex-inline' />. In other words: the <i>Discrete Logarithm Problem</i> (DLP) is hard in general: given <img src='http://math.fontein.de/wp-content/latex/fe7/fe7c96ffadea2923bee96d98d2284713-T-000000-0.png' alt='g, h' title='g, h' class='latex-inline' /> with <img src='http://math.fontein.de/wp-content/latex/859/859405989833767ee443fe1ce79a0bd7-T-000000-0.png' alt='h \in \ggen{g}' title='h \in \ggen{g}' class='latex-inline' />, find <img src='http://math.fontein.de/wp-content/latex/72e/72e07933327508be8d2ca29128a878d7-T-000000-0.png' alt='n \in \N' title='n \in \N' class='latex-inline' /> with <img src='http://math.fontein.de/wp-content/latex/ce3/ce33a2587bc7109e7981cac05dce06bd-T-000000-0.png' alt='g^n = h' title='g^n = h' class='latex-inline' />.</p>

<p>Consider the subgroup <img src='http://math.fontein.de/wp-content/latex/7ed/7ed77c1f1ac508aff4e95fd25007fde1-T-000000-0.png' alt='\ggen{g}' title='\ggen{g}' class='latex-inline' /> generated by <img src='http://math.fontein.de/wp-content/latex/b2f/b2f5ff47436671b6e533d8dc3614845d-T-000000-0.png' alt='g' title='g' class='latex-inline' />. It is of the form <img src='http://math.fontein.de/wp-content/latex/452/4528f03bb318711cd02ce75e74d11878-T-000000-0.png' alt='\{ g^n \mid n \in \Z \}' title='\{ g^n \mid n \in \Z \}' class='latex-inline' />, and the map <img src='http://math.fontein.de/wp-content/latex/503/503b11ef7c07b86273979a00fa6cfb4b-T-000000-0.png' alt='\varphi : \Z \to \ggen{g}' title='\varphi : \Z \to \ggen{g}' class='latex-inline' />, <img src='http://math.fontein.de/wp-content/latex/3d1/3d11e271491a167413e954b3caabeff0-T-000000-0.png' alt='n \mapsto g^n' title='n \mapsto g^n' class='latex-inline' /> is an epimorphism. Let <img src='http://math.fontein.de/wp-content/latex/a0e/a0eae85d119347884d6cb549c999bf9a-T-000000-0.png' alt='\ker \varphi = m \Z' title='\ker \varphi = m \Z' class='latex-inline' /> with <img src='http://math.fontein.de/wp-content/latex/b1a/b1a773f3976ad93dabd87998f18b05ed-T-000000-0.png' alt='m \ge 0' title='m \ge 0' class='latex-inline' />; then <img src='http://math.fontein.de/wp-content/latex/875/87567e37a1fe699fe1c5d3a79325da6f-T-000000-0.png' alt='\varphi' title='\varphi' class='latex-inline' /> induces an isomorphism <img src='http://math.fontein.de/wp-content/latex/482/482d4cd6d30c4f52cf97cfde0a8edddb-T-000000-0.png' alt='\psi : \Z/m\Z \to \ggen{g}' title='\psi : \Z/m\Z \to \ggen{g}' class='latex-inline' />. The inverse map <img src='http://math.fontein.de/wp-content/latex/25f/25fd80fb88382dec6bb4d700be0b09e7-T-000000-0.png' alt='\psi^{-1} : \ggen{g} \to \Z/m\Z' title='\psi^{-1} : \ggen{g} \to \Z/m\Z' class='latex-inline' />, <img src='http://math.fontein.de/wp-content/latex/e89/e89e54f5ac4093b162006e289e7740d7-T-000000-0.png' alt='g^n \mapsto n + m\Z' title='g^n \mapsto n + m\Z' class='latex-inline' /> is called the <i>discrete logarithm with base <img src='http://math.fontein.de/wp-content/latex/b2f/b2f5ff47436671b6e533d8dc3614845d-T-000000-0.png' alt='g' title='g' class='latex-inline' /></i>, denoted by <img src='http://math.fontein.de/wp-content/latex/ea5/ea5bbce6b9562a9db98d08fdb7ecfe61-T-000000-0.png' alt='\log_g' title='\log_g' class='latex-inline' />. Hence, the DLP is the problem of computing the function <img src='http://math.fontein.de/wp-content/latex/ea5/ea5bbce6b9562a9db98d08fdb7ecfe61-T-000000-0.png' alt='\log_g' title='\log_g' class='latex-inline' />.</p>

<p>In 1976, Whitfield Diffie and Martin Hellman came up with a <a href="http://math.fontein.de/forward.php?r=http://en.wikipedia.org/wiki/Diffie-Hellman_key_exchange">key exchange protocol</a> based on the fact that, given <img src='http://math.fontein.de/wp-content/latex/b2f/b2f5ff47436671b6e533d8dc3614845d-T-000000-0.png' alt='g' title='g' class='latex-inline' />, <img src='http://math.fontein.de/wp-content/latex/729/72974a8b3ff4261878a9ec106886e0da-T-000000-0.png' alt='g^a' title='g^a' class='latex-inline' /> and <img src='http://math.fontein.de/wp-content/latex/995/995f2ec230855ed8ed2509232394a579-T-000000-0.png' alt='g^b' title='g^b' class='latex-inline' />, one probably needs to solve at least one DLP (to obtain <img src='http://math.fontein.de/wp-content/latex/0cc/0cc175b9c0f1b6a831c399e269772661-T-000000-0.png' alt='a' title='a' class='latex-inline' /> or <img src='http://math.fontein.de/wp-content/latex/92e/92eb5ffee6ae2fec3ad71c777531578f-T-000000-0.png' alt='b' title='b' class='latex-inline' />) to be able to compute <img src='http://math.fontein.de/wp-content/latex/9fa/9fa3d8eac258d5bc3d682c7e74d7e101-T-000000-0.png' alt='g^{a b} = (g^a)^b = (g^b)^a' title='g^{a b} = (g^a)^b = (g^b)^a' class='latex-inline' />. And nine years later, Taher ElGamal presented an <a href="http://math.fontein.de/forward.php?r=http://en.wikipedia.org/wiki/ElGamal_encryption">encryption scheme</a> which is also based on the DLP.</p>

<p>First, these systems were originally used with <img src='http://math.fontein.de/wp-content/latex/b71/b717fd1e81b140f3400f71c648b58569-T-000000-0.png' alt='G = \F_p^*' title='G = \F_p^*' class='latex-inline' /> or <img src='http://math.fontein.de/wp-content/latex/86e/86e0cb789def797e5f6208b22ca67c0b-T-000000-0.png' alt='\F_q^*' title='\F_q^*' class='latex-inline' />, the multiplicative groups of finite (prime) fields, but can in fact be used with <i>any</i> group. In 1985, Neal Koblitz and Victor Miller independently proposed to use <a href="http://math.fontein.de/forward.php?r=http://en.wikipedia.org/wiki/Elliptic_curve_cryptography">elliptic curves</a> over finite fields <img src='http://math.fontein.de/wp-content/latex/9f8/9f8d3077d492926f4328882d4f1700aa-T-000000-0.png' alt='\F_q' title='\F_q' class='latex-inline' />, which yield abelian groups of size <img src='http://math.fontein.de/wp-content/latex/847/8474dcbc5424c09e6e8e61cccf15ec59-T-000000-0.png' alt='q + 1 + \calO(\sqrt{q})' title='q + 1 + \calO(\sqrt{q})' class='latex-inline' />. Later, groups obtained from hyperelliptic curves or curves were proposed.</p>

<p>There have also been proposals to replace groups by weaker structures, for example <a href="http://math.fontein.de/forward.php?r=http://en.wikipedia.org/wiki/Semigroup">semigroups</a> or certain <a href="http://math.fontein.de/forward.php?r=http://en.wikipedia.org/wiki/Loop_(algebra)">loops</a>. In general, one can use any algebraic structure <img src='http://math.fontein.de/wp-content/latex/7fc/7fc56270e7a70fa81a5935b72eacbe29-T-000000-0.png' alt='A' title='A' class='latex-inline' /> which allows to define <img src='http://math.fontein.de/wp-content/latex/02b/02b39c4bea11d679ef78cad17231b4d8-T-000000-0.png' alt='a^n' title='a^n' class='latex-inline' /> for <img src='http://math.fontein.de/wp-content/latex/026/026638d7828e8287894f1cccedfaee9c-T-000000-0.png' alt='a \in A' title='a \in A' class='latex-inline' />, <img src='http://math.fontein.de/wp-content/latex/76d/76d602aad8fc1509f7e385c3ad1d1d41-T-000000-0.png' alt='n \in \N_{&gt;0}' title='n \in \N_{&gt;0}' class='latex-inline' /> such that <img src='http://math.fontein.de/wp-content/latex/02b/02b39c4bea11d679ef78cad17231b4d8-T-000000-0.png' alt='a^n' title='a^n' class='latex-inline' /> can be computed efficiently. As for that, one usually wants <img src='http://math.fontein.de/wp-content/latex/a19/a19378050abcd419c9df03ddd0dbdaaa-T-000000-0.png' alt='a^n a^m = a^{n+m}' title='a^n a^m = a^{n+m}' class='latex-inline' />, we merely require the operation to be <a href="http://math.fontein.de/forward.php?r=http://en.wikipedia.org/wiki/Power_associativity">power associative</a>.</p>

<p>Now one can ask if it is possible to drop this requirement and replace exponentiation and discrete logarithms by something similar. So far, the only such algebraic structure which has a huge class of instances which can be easily obtained from algebraic objects and in which one can efficiently compute are <i>infrastructures</i>. In the following articles I first want to explain and discuss the definition of infrastructures and show how finite abelian groups can be interpreted as infrastructures. Then I want to explain how infrastructures can be obtained from <a href="http://math.fontein.de/forward.php?r=http://en.wikipedia.org/wiki/Global_field">global fields</a>.</p>

<p>In case you want to read up more details, please consult the preprint of my paper <a href="http://math.fontein.de/forward.php?r=http://arxiv.org/abs/0809.1685">The Infrastructure of a Global Field of Arbitrary Unit Rank</a> or my <a href="http://math.fontein.de/forward.php?r=http://opac.nebis.ch/F/%3Flocal_base=NEBIS%26con_lng=ENG%26func=find-b%26find_code=SYS%26request=005797496">PhD thesis</a> (click <i>Volltext</i>).</p>]]></content:encoded>
			<wfw:commentRss>http://math.fontein.de/2009/07/20/the-discrete-logarithm-problem-and-generalizations/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>

