10.12.2012 Views

Prime Numbers

Prime Numbers

Prime Numbers

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

9.7 Exercises 533<br />

9.69. Implement Algorithm 9.6.1 for multiplication of polynomials with<br />

coefficients (mod p). Such an implementation is useful in, say, the Schoof<br />

algorithm for counting points on elliptic curves, for in that method, one has<br />

not only to multiply large polynomials, but create powering ladders that rely<br />

on the large-degree-polynomial multiplies.<br />

9.70. Prove both complexity claims in the text following Algorithm 9.6.1.<br />

Describe under what conditions, e.g., what D, p ranges, or what memory<br />

constraints, and so on, which of the methods indicated—Nussbaumer<br />

convolution or binary-segmentation method—would be the more practical.<br />

For further analysis, you might consider the Shoup method for polynomial<br />

multiplication [Shoup 1995], which is a CRT-convolution-based method, which<br />

will have its own complexity formula. To which of the two above methods does<br />

the Shoup method compare most closely, in complexity terms?<br />

9.71. Say that polynomials x(t),y(t) havecoefficients(modp) and degrees<br />

≈ N. For Algorithm 9.6.4, which calls Algorithm 9.6.2, what is the asymptotic<br />

bit complexity of the polynomial mod operation x mod y, in terms of p<br />

and N? (You need to make an assumption about the complexity of the<br />

integer multiplication for products of coefficients.) What if one is, as in many<br />

integer mod scenarios, doing many polynomial mods with the same modulus<br />

polynomial y(t), so that one has only to evaluate the truncated inverse R[y, ]<br />

once?<br />

9.72. Here we explore another relation for Bernoulli numbers (mod p).<br />

Prove the theorem that if p ≥ 5isprime,a is coprime to p, and we define<br />

d = −p −1 mod a, then for even m in [2,p− 3],<br />

Bm<br />

m (am p−1<br />

− 1) ≡ j m−1 (dj mod a) (modp).<br />

Then establish the corollary that<br />

j=0<br />

Bm<br />

m (2−m − 1) ≡ 1<br />

(p−1)/2 <br />

2<br />

j=1<br />

j m−1 (mod p).<br />

Now achieve the interesting conclusion that if p ≡ 3 (mod 4), then B (p+1)/2<br />

cannot vanish (mod p).<br />

Such summation formulae have some practical value, but more computationally<br />

efficient forms exist, in which summation indices need cover only a<br />

fraction of the integers in the interval [0,p− 1], see [Wagstaff 1978], [Tanner<br />

and Wagstaff 1987].<br />

9.73. Prove that Algorithm 9.6.5 works. Then modify the algorithm for<br />

a somewhat different problem, which is to evaluate a polynomial given in<br />

product form<br />

x(t) =t(t + d)(t +2d) ···(t +(n − 1)d),

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!