{"title":"Fast and rigorous factorization under the generalized Riemann hypothesis","authors":"A.K. Lenstra","doi":"10.1016/S1385-7258(88)80022-2","DOIUrl":null,"url":null,"abstract":"<div><p>We present an algorithm that finds a non-trivial factor of an odd composite integer <em>n</em> with probability <em>⩾1/2 - o(1)</em> in expected time bounded by <span><math><mrow><msup><mi>e</mi><mrow><mo>(</mo><mn>1</mn><mo>+</mo><mi>o</mi><mo>(</mo><mn>1</mn><mo>)</mo><mo>)</mo><msqrt><mrow><mi>log</mi><mo></mo><mi>n</mi><mi>log</mi><mo></mo><mi>log</mi><mo></mo><mi>n</mi></mrow></msqrt></mrow></msup></mrow></math></span>. This result can be <em>rigorously</em> proved under the sole assumption of the generalized Riemann hypothesis. The time bound matches the <em>heuristic</em> time bounds for the continued fraction algorithm, the quadratic sieve algorithm, the Schnorr-Lenstra class group algorithm, and the worst case of the elliptic curve method. The algorithm is based on Seysen's factoring algorithm [14], and the elliptic curve smoothness test from [12].</p></div>","PeriodicalId":100664,"journal":{"name":"Indagationes Mathematicae (Proceedings)","volume":"91 4","pages":"Pages 443-454"},"PeriodicalIF":0.0000,"publicationDate":"1988-12-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/S1385-7258(88)80022-2","citationCount":"16","resultStr":null,"platform":"Semanticscholar","paperid":null,"PeriodicalName":"Indagationes Mathematicae (Proceedings)","FirstCategoryId":"1085","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S1385725888800222","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
引用次数: 16
Abstract
We present an algorithm that finds a non-trivial factor of an odd composite integer n with probability ⩾1/2 - o(1) in expected time bounded by . This result can be rigorously proved under the sole assumption of the generalized Riemann hypothesis. The time bound matches the heuristic time bounds for the continued fraction algorithm, the quadratic sieve algorithm, the Schnorr-Lenstra class group algorithm, and the worst case of the elliptic curve method. The algorithm is based on Seysen's factoring algorithm [14], and the elliptic curve smoothness test from [12].