Probabilistic algorithms in finite fields
SFCS '81 Proceedings of the 22nd Annual Symposium on Foundations of Computer Science
Cryptanalysis of two group key management protocols for secure multicast
CANS'05 Proceedings of the 4th international conference on Cryptology and Network Security
| Hi-index | 0.00 |
Let F be a field of q=p^n elements, where p is prime. We present two new probabilisticalgorithms for factoring polynomials in F[X] that make particularly efficient use of random bits. They are easy to implement, and require no randomness beyond an initial seed whose length is proportional to the input size. The first algorithm is based on a procedure of Berlekamp; on input f in F[X] of degree d, it uses d log"2p random bits and produces in polynomial time a complete factorisation of f with a failure probability of no more than 1/p^(^1^-^e^)^d^/^2. (Here @e denotes a fixed parameter between 0 and 1 that can be chosen by the implementer.) The second algorithm is based on a method of Cantor and Zassenhaus; it uses d log"2q random bits and fails to find a complete factorisation with probability no more than 1/q^(^1^-^e^)^d^/^4. For both of these algorithms, the failure probability is exponentially small in the number of random bits used.