Re: a^(b^x) mod n?

From: David Wagner (daw_at_taverner.cs.berkeley.edu)
Date: 06/22/05


Date: Wed, 22 Jun 2005 16:04:04 +0000 (UTC)


>Given positive integers a,b,x,n is it possible to efficiently compute:
>a^(b^x) mod n?
>phi(n) is unknown and b^x is so large it can't be used directly.
>Or is it known this to be a hard problem?

This has been conjectured to be hard (even for parallel computers!)
in the following paper:
  http://www.cs.berkeley.edu/~daw/papers/timelock.ps
I have never seen any further evidence for its hardness (other than
"I can't seem to find any efficient algorithm for this problem").



Relevant Pages

  • a^(b^x) mod n?
    ... Given positive integers a,b,x,n is it possible to efficiently compute: ... phiis unknown and b^x is so large it can't be used directly. ... Or is it known this to be a hard problem? ... Prev by Date: ...
    (sci.math)
  • Re: a^(b^x) mod n?
    ... > Given positive integers a,b,x,n is it possible to efficiently compute: ... > phiis unknown and b^x is so large it can't be used directly. ... Only need roughly O) multiplications. ...
    (sci.math)
  • Re: a^(b^x) mod n?
    ... > Given positive integers a,b,x,n is it possible to efficiently compute: ... > phiis unknown and b^x is so large it can't be used directly. ... then repeat 1000 times. ... To raise a^b you use the binary method in the previous respondents reply. ...
    (sci.math)
  • Re: a^(b^x) mod n?
    ... > Given positive integers a,b,x,n is it possible to efficiently compute: ... > phiis unknown and b^x is so large it can't be used directly. ... You can compute the value b^x and then use the square and multiply ... algorithm. ...
    (sci.crypt)