• Corpus ID: 236088088

Elliptic Curve Fast Fourier Transform (ECFFT) Part I: Fast Polynomial Algorithms over all Finite Fields

  title={Elliptic Curve Fast Fourier Transform (ECFFT) Part I: Fast Polynomial Algorithms over all Finite Fields},
  author={Eli Ben-Sasson and Dan Carmon and Swastik Kopparty and David Levit},
  journal={Electron. Colloquium Comput. Complex.},
Over finite fields F q containing a root of unity of smooth order n (smoothness means n is the product of small primes), the Fast Fourier Transform (FFT) leads to the fastest known algebraic algorithms for many basic polynomial operations, such as multiplication, division, interpolation and multi-point evaluation. These operations can be computed by constant fan-in arithmetic circuits over F q of quasi-linear size; specifically, O ( n log n ) for multiplication and division, and O ( n log 2 n… 
3 Citations
Improved Straight-Line Extraction in the Random Oracle Model With Applications to Signature Aggregation
This paper develops new techniques to improve the computation cost of straight-line extractable proofs and improves the Prover’s random oracle query complexity when applied in the NIZK setting as well.
Brakedown: Linear-time and post-quantum SNARKs for R1CS
This paper introduces Brakedown, the first built system that provides linear-time SNARKs for NP, meaning the prover incurs O(N) finite field operations to prove the satisfiability of an N -sized R1CS
Low-Bandwidth Threshold ECDSA via Pseudorandom Correlation Generators
This protocol is the first one where the communication complexity of the preprocessing phase is only logarithmic in the number of ECDSA signatures to be produced later, and it achieves therefore a so-called silent preprocessing, and achieves active security against any number of arbitrarily corrupted parties.


Elliptic Curves Over Finite Fields and the Computation of Square Roots mod p
A deterministic algorithm to compute the number of F^-points of an elliptic curve that is defined over a finite field Fv and which is given by a Weierstrass equation is presented.
Faster Polynomial Multiplication via Discrete Fourier Transforms
It is proved that the famous Schonhage-Strassen's upper bound cannot be improved over the field of rational numbers if the authors consider only algorithms based on consecutive applications of DFT, as all known fastest algorithms are.
On fast multiplication of polynomials over arbitrary algebras
This paper generalizes the well-known Sch6nhage-Strassen algorithm for multiplying large integers to an algorithm for dividing polynomials with coefficients from an arbitrary, not necessarily commutative, not always associative, algebra d, and obtains a method not requiring division that is valid for any algebra.
Faster Polynomial Multiplication over Finite Fields
This work establishes the bound Mp(n) = O(n log n 8log* n log p), where log* n = min{k ϵ N: log …k×… log n ≤ 1} stands for the iterated logarithm.
Factoring integers with elliptic curves
This paper is devoted to the description and analysis of a new algorithm to factor positive integers that depends on the use of elliptic curves and it is conjectured that the algorithm determines a non-trivial divisor of a composite number n in expected time at most K( p)(log n)2.
Fast Modular Transforms
Gauss and the history of the fast fourier transform
The algorithm developed by Cooley and Tukey clearly had its roots in, though perhaps not a direct influence from, the early twentieth century, and remains the most Widely used method of computing Fourier transforms.
Finding elliptic curves with a subgroup of prescribed size
An unconditional version of the algorithm that works for almost all primes p, and a probabilistic algorithm with subexponential time complexity are given.
Fast integer multiplication using modular arithmetic
An algorithm for multiplying two N-bit integers that improves the O(N • log N • log log N) algorithm by Schönhage-Strassen and can be viewed as a p-adic version of Fürer's algorithm.
Integer multiplication in time O(n log n)
An algorithm is presented that computes the product of two n-bit integers in O(n log n) bit operations, thus confirming a conjecture of Schonhage and Strassen from 1971, and using a novel “Gaussian resampling” technique that enables the integer multiplication problem to be reduced to a collection of multidimensional discrete Fourier transforms over the complex numbers.