60

On improvements of the rr-adding walk in a finite field of characteristic 2

Abstract

It is currently known from the work of Shoup and Nechaev that a generic algorithm to solve the discrete logarithm problem in a group of prime order must have complexity at least kNk\sqrt{N} where NN is the order of the group. In many collision search algorithms this complexity is achieved. So with generic algorithms one can only hope to make the kk smaller. This kk depends on the complexity of the iterative step in the generic algorithms. The N\sqrt{N} comes from the fact there is about N\sqrt{N} iterations before a collision. So if we can find ways that can reduce the amount of work in one iteration then that is of great interest and probably the only possible modification of a generic algorithm. The modified rr-adding walk allegedly does just that. It claims to reduce the amount of work done in one iteration of the original rr-adding walk. In this paper we study this modified rr-adding walk, we critically analyze it and we compare it with the original rr-adding walk.

View on arXiv
Comments on this paper