Speeding the Pollard and elliptic curve methods of factorization

@article{Montgomery1987SpeedingTP,
  title={Speeding the Pollard and elliptic curve methods of factorization},
  author={Peter L. Montgomery},
  journal={Mathematics of Computation},
  year={1987},
  volume={48},
  pages={243-264}
}
Since 1974, several algorithms have been developed that attempt to factor a large number N by doing extensive computations module N and occasionally taking GCDs with N. These began with Pollard's p 1 and Monte Carlo methods. More recently, Williams published a p + 1 method, and Lenstra discovered an elliptic curve method (ECM). We present ways to speed all of these. One improvement uses two tables during the second phases of p ? 1 and ECM, looking for a match. Polynomial preconditioning lets us… 
View via Publisher
ams.org
1,214 Citations
Highly Influential Citations
127
Background Citations
256
Methods Citations
470
Results Citations
6

Tables from this paper

1,214 Citations

Citation Type

Citation Type

Factoring integers with elliptic curves
TLDR
This paper is devoted to the description and analysis of a new algorithm to factor positive integers that depends on the use of elliptic curves and it is conjectured that the algorithm determines a non-trivial divisor of a composite number n in expected time at most K( p)(log n)2.
The Elliptic Curve Method for Factoring Paul Zimmermann , INRIA
TLDR
The Elliptic Curve Method can be viewed as a generalization of Pollard's p − 1 method, just like ECPP generalizes the n − 1 primality test, which relies on Hasse’s theorem.
Toward A Theory of Pollard's Rho Method
  • E. Bach
  • Mathematics
    Inf. Comput.
  • 1991
Speeding up Integer Multiplication and Factorization
TLDR
Improvements to well-known algorithms for integer multiplication and factorization are explored, showing how parameters for these algorithms can be chosen accurately, taking into account the distribution of prime factors in integers produced by NFS to obtain an accurate estimate of finding a prime factor with given parameters.
The factorization of the ninth Fermat number
In this paper we exhibit the full prime factorization of the ninth Fermat number F9 = 2(512) + 1. It is the product of three prime factors that have 7, 49, and 99 decimal digits. We found the two…
Deterministic elliptic curve primality proving for a special sequence of numbers
We give a deterministic algorithm that very quickly proves the primality or compositeness of the integers N in a certain sequence, using an elliptic curve E/Q with complex multiplication by the ring…
Speeding up elliptic curve discrete logarithm computations with point halving
TLDR
A careful analysis of the alternative rho method with new iteration function is presented, and generally the new method can achieve a significant speedup for computing elliptic curve discrete logarithms over binary fields.
Counting Points On Elliptic Curves Over F p n Using Couveignes's Algorithm
TLDR
The aim of this paper is to describe the rst successful implementation of Couveignes's algorithm and to give numerous computational examples, including the use of fast algorithms for performing incremental operations on series.
Primality Proving Using Elliptic Curves: An Update
  • F. Morain
  • Mathematics, Computer Science
    ANTS
  • 1998
TLDR
An account of the recent theoretical and practical improvements of ECPP, as well as new benchmarks for integers of various sizes and a new primality record are given.
Addendum: The Factorization of the Ninth Fermat Number
In this paper we exhibit the full prime factorization of the ninth Fermat number Fg = 2512 + 1 . It is the product of three prime factors that have 7, 49, and 99 decimal digits. We found the two…
...
1
2
3
4
5
...

References

SHOWING 1-10 OF 37 REFERENCES
Factoring integers with elliptic curves
TLDR
This paper is devoted to the description and analysis of a new algorithm to factor positive integers that depends on the use of elliptic curves and it is conjectured that the algorithm determines a non-trivial divisor of a composite number n in expected time at most K( p)(log n)2.
Factorization of the eighth Fermat number
We describe a Monte Carlo factorization algorithm which was used to factorize the Fermat number F8 = 2256+1. Previously, F8 was known to be composite, but its factors were unknown. Comments Only the…
Theorems on factorization and primality testing
TLDR
This paper is concerned with the problem of obtaining theoretical estimates for the number of arithmetical operations required to factorize a large integer n or test it for primality, and uses a multi-tape Turing machine for this purpose.
A Monte Carlo factoring algorithm with linear storage
TLDR
An algorithm which will factor an integer n quite efficiently if the class number h(-n) is free of large prime divisors and the method requires an amount of storage space which is proportional to the length of the input n.
A method of factoring and the factorization of
The continued fraction method for factoring integers, which was introduced by D. H. Lehmer and R. E. Powers, is discussed along with its computer implementation. The power of the method is…
An improved Monte Carlo factorization algorithm
TLDR
A cycle-finding algorithm is described which is about 36 percent faster than Floyd's (on the average), and applied to give a Monte Carlo factorization algorithm which is similar to Pollard's but about 24 percent faster.
Modular multiplication without trial division
TLDR
A method for multiplying two integers modulo N while avoiding division by N, a representation of residue classes so as to speed modular multiplication without affecting the modular addition and subtraction algorithms.
The multiple polynomial quadratic sieve
TLDR
A modification, due to Peter Montgomery, of Pomerance's Quadratic Sieve for factoring large integers is discussed along with its implementation, which enables one to factor numbers in the 60-digit range in about a day, using a large minicomputer.
Sequences of numbers generated by addition in formal groups and new primality and factorization tests
A $p+1$ method of factoring
Let N have a prime divisor p such that p + 1 has only small prime divisors. A method is described which will allow for the determination of p, given N. This method is analogous to the p — 1 method of…
...
1
2
3
4
...