Re: fooling primality tests
From: Phil Carmody (thefatphil_demunge@yahoo.co.uk)
Date: 03/13/03
- Next message: Phil Carmody: "Re: fooling primality tests"
- Previous message: Scott Contini: "Re: Faster ephemeral DH-DLP"
- In reply to: Michael Amling: "Re: fooling primality tests"
- Next in thread: Francois Grieu: "Re: fooling primality tests"
- Reply: Francois Grieu: "Re: fooling primality tests"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Phil Carmody" <thefatphil_demunge@yahoo.co.uk> Date: Thu, 13 Mar 2003 23:45:42 +0200
On Thu, 13 Mar 2003 03:58:47 +0000, Michael Amling wrote:
> Trevor Perrin wrote:
>>
>> Thanks, my particular concern isn't generating primes, but efficiently
>> verifying that a number provided by a 3rd party is, in fact, a "safe
>> prime" (for example, this might be useful for the client to do in the
>> SRP protocol, if the server is supplying the group parameters).
>>
>> The best thing I can think of is 64 iterations of Miller-Rabin with
>> random bases on both N and (N-1)/2 (preceding this with trial
>> division, or other optimizations, don't seem that useful cause N isn't
>> random, but chosen by the server).
>
> Others on this forum have said that no composite is known that passes
> both a single Miller-Rabin and a single
> Lucas-somebodywhosenameescapesme. I expect that a Lucas-som..sme would
> be faster than 63 more Miller-Rabins.
Not so. You're thinking of the $620 PSW challenge, which is to find
a number == +/-2 mod 5 that is a 2-PRP (Fermat Pseudoprime) and also
a (1,-1)-LucasPRP (or Fibonacci) pseudoprime.
There are other 'none known' cases - for example I think that Grantham
(its inventor) has put up $6.20 for a (5,5)-FrobeniusPSP. (I may have a
sign wrong).
Certainly, if you're thinking of doing 63 PRP tests, you'd be far better
doing 21 Frobenius tests at the same cost.
Phil
- Next message: Phil Carmody: "Re: fooling primality tests"
- Previous message: Scott Contini: "Re: Faster ephemeral DH-DLP"
- In reply to: Michael Amling: "Re: fooling primality tests"
- Next in thread: Francois Grieu: "Re: fooling primality tests"
- Reply: Francois Grieu: "Re: fooling primality tests"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|