{"title":"广义黎曼假设下的快速严格因子分解","authors":"A.K. Lenstra","doi":"10.1016/S1385-7258(88)80022-2","DOIUrl":null,"url":null,"abstract":"<div><p>We present an algorithm that finds a non-trivial factor of an odd composite integer <em>n</em> with probability <em>⩾1/2 - o(1)</em> in expected time bounded by <span><math><mrow><msup><mi>e</mi><mrow><mo>(</mo><mn>1</mn><mo>+</mo><mi>o</mi><mo>(</mo><mn>1</mn><mo>)</mo><mo>)</mo><msqrt><mrow><mi>log</mi><mo></mo><mi>n</mi><mi>log</mi><mo></mo><mi>log</mi><mo></mo><mi>n</mi></mrow></msqrt></mrow></msup></mrow></math></span>. This result can be <em>rigorously</em> proved under the sole assumption of the generalized Riemann hypothesis. The time bound matches the <em>heuristic</em> time bounds for the continued fraction algorithm, the quadratic sieve algorithm, the Schnorr-Lenstra class group algorithm, and the worst case of the elliptic curve method. The algorithm is based on Seysen's factoring algorithm [14], and the elliptic curve smoothness test from [12].</p></div>","PeriodicalId":100664,"journal":{"name":"Indagationes Mathematicae (Proceedings)","volume":"91 4","pages":"Pages 443-454"},"PeriodicalIF":0.0000,"publicationDate":"1988-12-19","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"https://sci-hub-pdf.com/10.1016/S1385-7258(88)80022-2","citationCount":"16","resultStr":"{\"title\":\"Fast and rigorous factorization under the generalized Riemann hypothesis\",\"authors\":\"A.K. Lenstra\",\"doi\":\"10.1016/S1385-7258(88)80022-2\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<div><p>We present an algorithm that finds a non-trivial factor of an odd composite integer <em>n</em> with probability <em>⩾1/2 - o(1)</em> in expected time bounded by <span><math><mrow><msup><mi>e</mi><mrow><mo>(</mo><mn>1</mn><mo>+</mo><mi>o</mi><mo>(</mo><mn>1</mn><mo>)</mo><mo>)</mo><msqrt><mrow><mi>log</mi><mo></mo><mi>n</mi><mi>log</mi><mo></mo><mi>log</mi><mo></mo><mi>n</mi></mrow></msqrt></mrow></msup></mrow></math></span>. This result can be <em>rigorously</em> proved under the sole assumption of the generalized Riemann hypothesis. The time bound matches the <em>heuristic</em> time bounds for the continued fraction algorithm, the quadratic sieve algorithm, the Schnorr-Lenstra class group algorithm, and the worst case of the elliptic curve method. The algorithm is based on Seysen's factoring algorithm [14], and the elliptic curve smoothness test from [12].</p></div>\",\"PeriodicalId\":100664,\"journal\":{\"name\":\"Indagationes Mathematicae (Proceedings)\",\"volume\":\"91 4\",\"pages\":\"Pages 443-454\"},\"PeriodicalIF\":0.0000,\"publicationDate\":\"1988-12-19\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"https://sci-hub-pdf.com/10.1016/S1385-7258(88)80022-2\",\"citationCount\":\"16\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Indagationes Mathematicae (Proceedings)\",\"FirstCategoryId\":\"1085\",\"ListUrlMain\":\"https://www.sciencedirect.com/science/article/pii/S1385725888800222\",\"RegionNum\":0,\"RegionCategory\":null,\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"\",\"JCRName\":\"\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Indagationes Mathematicae (Proceedings)","FirstCategoryId":"1085","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S1385725888800222","RegionNum":0,"RegionCategory":null,"ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"","JCRName":"","Score":null,"Total":0}
Fast and rigorous factorization under the generalized Riemann hypothesis
We present an algorithm that finds a non-trivial factor of an odd composite integer n with probability ⩾1/2 - o(1) in expected time bounded by . This result can be rigorously proved under the sole assumption of the generalized Riemann hypothesis. The time bound matches the heuristic time bounds for the continued fraction algorithm, the quadratic sieve algorithm, the Schnorr-Lenstra class group algorithm, and the worst case of the elliptic curve method. The algorithm is based on Seysen's factoring algorithm [14], and the elliptic curve smoothness test from [12].