Narrow-Bicliques: cryptanalysis of full IDEA
EUROCRYPT'12 Proceedings of the 31st Annual international conference on Theory and Applications of Cryptographic Techniques
| Hi-index | 0.00 |
It is well known that the hardest bit of integer multiplication is the middle bit, i.e., MUL n驴1,n . This paper contains several new results on its complexity. First, the size s of randomized read-k branching programs, or, equivalently, their space (log s) is investigated. A randomized algorithm for MUL n驴1,n with $$k = {\mathcal{O}}(\hbox{log}\, n)$$ (implying time $${\mathcal{O}}(n\, \hbox{log}\, n))$$ , space $${\mathcal{O}}(\hbox{log}\, n)$$ and error probability n 驴c for arbitrarily chosen constants c is presented.Second, the size of general branching programs and formulas is investigated. Applying Nechiporuk's technique, lower bounds of $$\Omega (n^{3/2}/ \hbox{log}\, n)$$ and 驴 (n 3/2), respectively, are obtained. Moreover, by bounding the number of subfunctions of MUL n驴1,n , it is proven that Nechiporuk's technique cannot provide larger lower bounds than $${\mathcal{O}}(n^{5/3}/ \hbox{log}\, n)$$ and $${\mathcal{O}}(n^{5/3})$$ , respectively.