136
v1v2 (latest)

On the relation generation method of Joux for computing discrete logarithms

Abstract

In \cite{joux}, Joux devised an algorithm to compute discrete logarithms between elements in a certain subset of the multiplicative group of an extension of the finite field Fpn\mathbb{F}_{p^n} in time polynomial in pp and nn. Shortly after, Barbulescu, Gaudry, Joux and Thome \cite{bgjt} proposed a descent algorithm that in (pn)O(logn)(p n)^{\mathcal{O}(\log n)} time projects an arbitrary element in Fpn×\mathbb{F}_{p^n}^\times as a product of powers of elements in the aforementioned subset. Together, these two algorithms yield a quasi-polynomial time algorithm for computing discrete logarithms in finite fields of small characteristic. The success of both the algorithms are reliant on heuristic assumptions. We identify obstructions that prevent certain heuristic assumptions they make from being true in general. Further, we describe methods to overcome these obstructions.

View on arXiv
Comments on this paper