Modelling the yield of number field sieve polynomials
Understanding the yield of number field sieve polynomials is crucial to improving the performance of the algorithm, and to assessing its potential impact on the practical security of cryptosystems relying on integer factorisation. In this paper we examine the yield of these polynomials, concentrating on those produced by Montgomery's selection algorithm. Given such a polynomial f, we consider the influence of two factors; the size of values taken by f and the effect of the knowing the primes p for which f has roots mod p. Experiments show the influence of the first property, particularly whilst sieving close to real roots. Estimates of the effect of the second property show that it may effect yield by as much as a factor of two. We present sieving experiments demonstrating the effect to that extent. Finally, we suggest a preliminary model to approximate the behaviour of these polynomials across the sieving region.
KeywordsReal Root Random Integer Root Property Full Yield Practical Security
Unable to display preview. Download preview PDF.
- 2.H Boender, “Factoring Integers with the Quadratic Sieve”, PhD Thesis, University of Leiden, 1997.Google Scholar
- 4.K Dickman, “On the Frequency of Numbers Containing Prime Factors of a Certain Relative Magnitude”, Ark. Mat. Astronomi och Fysik 22A 10 (1930), pp 1–14.Google Scholar
- 9.R Lambert, “Computational Aspects of Discrete Logarithms”, PhD Thesis, Univeristy of Waterloo, 1996.Google Scholar