On Random Walks For Pollard's Rho Method (2000)
| Venue: | Mathematics of Computation |
| Citations: | 24 - 5 self |
BibTeX
@ARTICLE{Teske00onrandom,
author = {Edlyn Teske},
title = {On Random Walks For Pollard's Rho Method},
journal = {Mathematics of Computation},
year = {2000},
volume = {70},
pages = {809--825}
}
Years of Citing Articles
Bookmark
 |
 |
 |
 |
 |
 |
OpenURL
Abstract
. We consider Pollard's rho method for discrete logarithm computation. Usually, in the analysis of its running time the assumption is made that a random walk in the underlying group is simulated. We show that this assumption does not hold for the walk originally suggested by Pollard: its performance is worse than in the random case. We study alternative walks that can be efficiently applied to compute discrete logarithms. We introduce a class of walks that lead to the same performance as expected in the random case. We show that this holds for arbitrarily large prime group orders, thus making Pollard's rho method for prime group orders about 20% faster than before. 1. Introduction Let G be a finite cyclic group, written multiplicatively, and generated by the group element g. We define the discrete logarithm problem (DLP) as follows: given a group element h, find the least non-negative integer x such that h = g x . We write x = log g h and call it the discrete logarithm of h...
