Hermite normal form computation using modulo determinant arithmetic
Mathematics of Operations Research
Journal of Cryptology
A course in computational algebraic number theory
A course in computational algebraic number theory
Counting points on curves over finite fields
Journal of Symbolic Computation
Algebraic aspects of cryptography
Algebraic aspects of cryptography
Computing discrete logarithms in real quadratic congruence function fields of large genus
Mathematics of Computation
Designs, Codes and Cryptography
Proceedings of the First International Symposium on Algorithmic Number Theory
ANTS-I Proceedings of the First International Symposium on Algorithmic Number Theory
Proceedings of the Second International Symposium on Algorithmic Number Theory
ANTS-II Proceedings of the Second International Symposium on Algorithmic Number Theory
ANTS-I Proceedings of the First International Symposium on Algorithmic Number Theory
Computational Aspects of Curves of Genus at Least 2
ANTS-II Proceedings of the Second International Symposium on Algorithmic Number Theory
Cryptography in Quadratic Function Fields
Designs, Codes and Cryptography
Designs, Codes and Cryptography
European Journal of Combinatorics
An L (1/3 + ε) Algorithm for the Discrete Logarithm Problem for Low Degree Curves
EUROCRYPT '07 Proceedings of the 26th annual international conference on Advances in Cryptology
Sublinear scalar multiplication on hyperelliptic koblitz curves
SAC'11 Proceedings of the 18th international conference on Selected Areas in Cryptography
Isomorphism classes of hyperelliptic curves of genus 3 over finite fields
Finite Fields and Their Applications
Hi-index | 0.00 |
We provide a subexponential algorithm for solving the discrete logarithm problem in Jacobians of high-genus hyperelliptic curves over finite fields. Its expected running time for instances with genus g and underlying finite field Fq satisfying g ≥ ϑ log q for a positive constant ϑ is given by O(e(&frac5√6;(√1+3/2ϑ + √3/2ϑ) + o(1)) √(g log q) log (g log q)) The algorithm works over any finite field, and its running time does not rely on any unproven assumptions.