SearcharxivSearch

arXiv subjects

Joshua Holden

Publications and source records attributed to Joshua Holden.

17 recordsLinked to original sources

Decidability of the Orbit Problem Over $\mathbb{Q}(X)$

The orbit problem is the problem of whether, given $x, y\in \mathbb{Q}^n$ and an $n\times n$ matrix $A$, there exists an $i\in\mathbb{N}$ such that $A^ix = y$. In 1980, Kannan and Lipton proved that the orbit problem is decidable. We show that a generalization of the orbit problem, where the field is $\mathbb{Q}(X)$ for $X$ a countable set of transcendentals, is also decidable. We define the orbit power problem for an arbitrary group $G$ to be the problem of when, given $x, y\in G$, there exists an $n\in\mathbb{Z}$ such that $x^n = y$. We then use the main result to show that the power orbit problem is decidable for an assortment of groups, including the braid groups and $\operatorname{Aut}(F_2)$.

math.GR

Resource Guide for Teaching Post-Quantum Cryptography

Public-key cryptography has become a popular way to motivate the teaching of concepts in elementary number theory, abstract algebra, and introduction to proof courses, as well as in cryptography courses. Unfortunately, many experts expect quantum computers to make common forms of public-key cryptography obsolete in the near future. Fortunately, there are several systems being evaluated to replace RSA and the other systems we currently use. While some of the systems are too complicated to be good examples in introductory courses, others are either quite manageable or have simplified versions which are manageable. This article gives a tour of the main types of systems under consideration and the teaching resources available for instructors who want to teach them.

math.HO

Counting fixed points and rooted closed walks of the singular map $x \mapsto x^{x^n}$ modulo powers of a prime

The "self-power" map $x \mapsto x^x$ modulo $m$ and its generalized form $x \mapsto x^{x^n}$ modulo $m$ are of considerable interest for both theoretical reasons and for potential applications to cryptography. In this paper, we use $p$-adic methods, primarily $p$-adic interpolation, Hensel's lemma, and lifting singular points modulo $p$, to count fixed points and rooted closed walks of equations related to these maps when $m$ is a prime power. In particular, we introduce a new technique for lifting singular solutions of several congruences in several unknowns using the left kernel of the Jacobian matrix.

math.NT

Statistics for fixed points of the self-power map

The map x -> x^x modulo p is related to a variation of the digital signature scheme in a similar way to the discrete exponentiation map, but it has received much less study. We explore the number of fixed points of this map by a statistical analysis of experimental data. In particular, the number of fixed points can in many cases be modeled by a binomial distribution. We discuss the many cases where this has been successful, and also the cases where a good model may not yet have been found.

math.NT

Counting Fixed Points, Two-Cycles, and Collisions of the Discrete Exponential Function using p-adic Methods

Brizolis asked for which primes p greater than 3 does there exist a pair (g, h) such that h is a fixed point of the discrete exponential map with base g, or equivalently h is a fixed point of the discrete logarithm with base g. Zhang (1995) and Cobeli and Zaharescu (1999) answered with a "yes" for sufficiently large primes and gave estimates for the number of such pairs when g and h are primitive roots modulo p. In 2000, Campbell showed that the answer to Brizolis was "yes" for all primes. The first author has extended this question to questions about counting fixed points, two-cycles, and collisions of the discrete exponential map. In this paper, we use p-adic methods, primarily Hensel's lemma and p-adic interpolation, to count fixed points, two cycles, collisions, and solutions to related equations modulo powers of a prime p.

math.NT

Mapping the Discrete Logarithm

The discrete logarithm is a problem that surfaces frequently in the field of cryptography as a result of using the transformation g^a mod n. This paper focuses on a prime modulus, p, for which it is shown that the basic structure of the functional graph is largely dependent on an interaction between g and p-1. In fact, there are precisely as many different functional graph structures as there are divisors of p-1. This paper extracts two of these structures, permutations and binary functional graphs. Estimates exist for the shape of a random permutation, but similar estimates must be created for the binary functional graphs. Experimental data suggests that both the permutations and binary functional graphs correspond well to the theoretical data which provides motivation to extend this to larger divisors of p-1 and study the impact this forced structure has on the many cryptographic algorithms that rely on the discrete logarithm for their security. This is especially applicable to those algorithms that require a "safe" prime (p=2q+1, where q is prime) modulus since all non-trivial functional graphs generated using a safe prime modulus can be analyzed by the framework presented here.

math.NT

Underwater Hacker Missile Wars: A Cryptography and Engineering Contest

For a recent student conference, the authors developed a day-long design problem and competition suitable for engineering, mathematics and science undergraduates. The competition included a cryptography problem, for which a workshop was run during the conference. This paper describes the competition, focusing on the cryptography problem and the workshop. Notes from the workshop and code for the computer programs are made available via the Internet. The results of a personal self-evaluation (PSE) are described.

cs.CR

Distribution of the Error in Estimated Numbers of Fixed Points of the Discrete Logarithm

Brizolis asked the question: does every prime p have a pair (g,h) such that h is a fixed point for the discrete logarithm with base g? The author and Pieter Moree, building on work of Zhang, Cobeli, and Zaharescu, gave heuristics for estimating the number of such pairs and proved bounds on the error in the estimates. These bounds are not descriptive of the true situation, however, and this paper is a first attempt to collect and analyze some data on the distribution of the actual error in the estimates.

math.NT

Some Heuristics and Results for Small Cycles of the Discrete Logarithm

Brizolis asked the question: does every prime p have a pair (g,h) such that h is a fixed point for the discrete logarithm with base g? The first author previously extended this question to ask about not only fixed points but also two-cycles, and gave heuristics (building on work of Zhang, Cobeli, Zaharescu, Campbell, and Pomerance) for estimating the number of such pairs given certain conditions on g and h. In this paper we extend these heuristics and prove results for some of them, building again on the aforementioned work. We also make some new conjectures and prove some average versions of the results.

math.NT

Notes on an analogue of the Fontaine-Mazur conjecture

We estimate the proportion of function fields satisfying certain conditions which imply a function-field analogue of the Fontaine-Mazur conjecture. As a byproduct, we compute the fraction of abelian varieties (or even Jacobians) over a finite field which have a rational point of order l.

math.NT

A Comparison of Cryptography Courses

The author taught two courses on cryptography, one at Duke University aimed at non-mathematics majors and one at Rose-Hulman Institute of Technology aimed at mathematics and computer science majors. Both tried to incorporate technical and societal aspects of cryptography, with varying emphases. This paper will discuss the strengths and weaknesses of both courses and compare the differences in the author's approach.

cs.CR

New Conjectures and Results for Small Cycles of the Discrete Logarithm

Brizolis asked the question: does every prime p have a pair (g,h) such that h is a fixed point for the discrete logarithm with base g? The first author previously extended this question to ask about not only fixed points but also two-cycles, and gave heuristics (building on work of Zhang, Cobeli, Zaharescu, Campbell, and Pomerance) for estimating the number of such pairs given certain conditions on $g$ and $h$. In this paper we give a summary of conjectures and results which follow from these heuristics, building again on the aforementioned work. We also make some new conjectures and prove some average versions of the results.

math.NT

Addenda/Corrigenda: Fixed Points and Two-cycles of the Discrete Logarithm

The abstract of the original paper was as follows: We explore some questions related to one of Brizolis: does every prime p have a pair (g,h) such that h is a fixed point for the discrete logarithm with base g? We extend this question to ask about not only fixed points but also two-cycles. Campbell and Pomerance have not only answered the fixed point question for sufficiently large p but have also rigorously estimated the number of such pairs given certain conditions on g and h. We attempt to give heuristics for similar estimates given other conditions on g and h and also in the case of two-cycles. These heuristics are well-supported by the data we have collected, and seem suitable for conversion into rigorous estimates in the future.

math.NT

First-hit analysis of algorithms for computing quadratic irregularity

The author has previously extended the theory of regular and irregular primes to the setting of arbitrary totally real number fields. It has been conjectured that the Bernoulli numbers, or alternatively the values of the Riemann zeta function at odd negative integers, are evenly distributed modulo p for every p. This is the basis of a well-known heuristic given by Siegel for estimating the frequency of irregular primes. So far, analyses have shown that if Q(\sqrt{D}) is a real quadratic field, then the values of the zeta function ζ_{D}(1-2m)=ζ_{Q(\sqrt{D})}(1-2m) at negative odd integers are also distributed as expected modulo p for any p. We use this heuristic to predict the computational time required to find quadratic analogues of irregular primes with a given order of magnitude. We also discuss alternative ways of collecting large amounts of data to test the heuristic.

math.NT

Distribution of Values of Real Quadratic Zeta Functions

The author has previously extended the theory of regular and irregular primes to the setting of arbitrary totally real number fields. It has been conjectured that the Bernoulli numbers, or alternatively the values of the Riemann zeta function at odd negative integers, are evenly distributed modulo p for every p. This is the basis of a well-known heuristic, given by Siegel, for estimating the frequency of irregular primes. So far, analyses have shown that if Q(\sqrt{D}) is a real quadratic field, then the values of the zeta function ζ_{D}(1-2m)=ζ_{Q(\sqrt{D})}(1-2m) at negative odd integers are also distributed as expected modulo p for any p. However, it has proven to be very computationally intensive to calculate these numbers for large values of m. In this paper, we present the alternative of computing ζ_{D}(1-2m) for a fixed value of D and a large number of different m.

math.NT

Comparison of algorithms to calculate quadratic irregularity of prime numbers

In previous work, the author has extended the concept of regular and irregular primes to the setting of arbitrary totally real number fields k_{0}, using the values of the zeta function ζ_{k_{0}} at negative integers as our ``higher Bernoulli numbers''. In the case where k_{0} is a real quadratic field, Siegel presented two formulas for calculating these zeta-values: one using entirely elementary methods and one which is derived from the theory of modular forms. (The author would like to thank Henri Cohen for suggesting an analysis of the second formula.) We briefly discuss several algorithms based on these formulas and compare the running time involved in using them to determine the index of k_{0}-irregularity (more generally, ``quadratic irregularity'') of a prime number.

math.NT