| Summary: | The discrete logarithm problem (DLP) in a finite group is the basis for many protocols in cryptography. The best general algorithms which solve this problem have a time complexity of O(NlogN)O\left(\sqrt{N}\log N) and a space complexity of O(N)O\left(\sqrt{N}), where NN is the order of the group. (If NN is unknown, a simple modification would achieve a time complexity of O(N(logN)2)O\left(\sqrt{N}{\left(\log N)}^{2}).) These algorithms require the inversion of some group elements or rely on finding collisions and the existence of inverses, and thus do not adapt to work in the general semigroup setting. For semigroups, probabilistic algorithms with similar time complexity have been proposed. The main result of this article is a deterministic algorithm for solving the DLP in a semigroup. Specifically, let xx be an element in a semigroup having finite order Nx{N}_{x}. The article provides an algorithm, which, given any element y∈⟨x⟩y\in \langle x\rangle , provides all natural numbers mm with xm=y{x}^{m}=y, and has time complexity O(Nx(logNx)2)O\left(\sqrt{{N}_{x}}{\left(\log {N}_{x})}^{2}) steps. The article also gives an analysis of the success rates of the existing probabilistic algorithms, which were so far only conjectured or stated loosely.
|
|---|