Bad witnesses for a composite number

Johnathan Djella Legnongo,Tony Ezome,Florian Luca

2023-05-13

Abstract:We describe the average sizes of the set of bad witnesses for a pseudo-primality test which is the product of a multiple-rounds Miller-Rabin test by the Galois test.

Number Theory

What problem does this paper attempt to address?

Average Case Error Estimates of the Strong Lucas Test

Semira Einsele,Kenneth Paterson

2023-06-16

Abstract:Reliable probabilistic primality tests are fundamental in public-key cryptography. In adversarial scenarios, a composite with a high probability of passing a specific primality test could be chosen. In such cases, we need worst-case error estimates for the test. However, in many scenarios the numbers are randomly chosen and thus have significantly smaller error probability. Therefore, we are interested in average case error estimates. In this paper, we establish such bounds for the strong Lucas primality test, as only worst-case, but no average case error bounds, are currently available. This allows us to use this test with more confidence. We examine an algorithm that draws odd $k$-bit integers uniformly and independently, runs $t$ independent iterations of the strong Lucas test with randomly chosen parameters, and outputs the first number that passes all $t$ consecutive rounds. We attain numerical upper bounds on the probability on returing a composite. Furthermore, we consider a modified version of this algorithm that excludes integers divisible by small primes, resulting in improved bounds. Additionally, we classify the numbers that contribute most to our estimate.

Cryptography and Security,Number Theory
A Probable Prime Test With High Confidence

Jon Grantham

DOI: https://doi.org/10.1006/jnth.1998.2247

2019-03-16

Abstract:Monier and Rabin proved that an odd composite can pass the Strong Probable Prime Test for at most $\frac 14$ of the possible bases. In this paper, a probable prime test is developed using quadratic polynomials and the Frobenius automorphism. The test, along with a fixed number of trial divisions, ensures that a composite $n$ will pass for less than $\frac 1{7710}$ of the polynomials $x^2-bx-c$ with $\left(b^2+4c\over n\right)=-1$ and $\left(-c\over n\right)=1$. The running time of the test is asymptotically $3$ times that of the Strong Probable Prime Test.

Number Theory
From Worst to Average Case to Incremental Search Bounds of the Strong Lucas Test

Semira Einsele,Gerhard Wunder

2024-06-07

Abstract:The strong Lucas test is a widely used probabilistic primality test in cryptographic libraries. When combined with the Miller-Rabin primality test, it forms the Baillie-PSW primality test, known for its absence of false positives, undermining the relevance of a complete understanding of the strong Lucas test. In primality testing, the worst-case error probability serves as an upper bound on the likelihood of incorrectly identifying a composite as prime. For the strong Lucas test, this bound is $4/15$ for odd composites, not products of twin primes. On the other hand, the average-case error probability indicates the probability that a randomly chosen integer is inaccurately classified as prime by the test. This bound is especially important for practical applications, where we test primes that are randomly generated and not generated by an adversary. The error probability of $4/15$ does not directly carry over due to the scarcity of primes, and whether this estimate holds has not yet been established in the literature. This paper addresses this gap by demonstrating that an integer passing $t$ consecutive test rounds, alongside additional standard tests of low computational cost, is indeed prime with a probability greater than $1-(4/15)^t$ for all $t\geq 1$. Furthermore, we introduce error bounds for the incremental search algorithm based on the strong Lucas test, as there are no established bounds up to date as well. Rather than independent selection, in this approach, the candidate is chosen uniformly at random, with subsequent candidates determined by incrementally adding 2. This modification reduces the need for random bits and enhances the efficiency of trial division computation further.

Cryptography and Security,Number Theory
Composite values of shifted exponentials

Olli Järviniemi,Joni Teräväinen

DOI: https://doi.org/10.1016/j.aim.2023.109187

2023-06-19

Abstract:A well-known open problem asks to show that $2^n+5$ is composite for almost all values of $n$. This was proposed by Gil Kalai as a possible Polymath project, and was posed originally by Christopher Hooley. We show that, assuming GRH and a form of the pair correlation conjecture, the answer to this problem is affirmative. We in fact do not need the full power of the pair correlation conjecture, and it suffices to assume a generalization of the Brun-Titchmarsh inequality for the Chebotarev density theorem that is implied by it. Our methods apply to any shifted exponential sequence of the form $a^n-b$ and show that, under the same assumptions, such numbers are $k$-almost primes for a density $0$ of natural numbers $n$. Furthermore, we show that $a^p-b$ is composite for almost all primes $p$ whenever $(a, b) \neq (2, 1)$.

Number Theory
A polytime proof of correctness of the Rabin-Miller algorithm from Fermat's little theorem

Grzegorz Herman,Michael Soltys

DOI: https://doi.org/10.48550/arXiv.0811.3959

2008-11-24

Computational Complexity

Abstract:Although a deterministic polytime algorithm for primality testing is now known, the Rabin-Miller randomized test of primality continues being the most efficient and widely used algorithm. We prove the correctness of the Rabin-Miller algorithm in the theory V1 for polynomial time reasoning, from Fermat's little theorem. This is interesting because the Rabin-Miller algorithm is a polytime randomized algorithm, which runs in the class RP (i.e., the class of polytime Monte-Carlo algorithms), with a sampling space exponential in the length of the binary encoding of the input number. (The class RP contains polytime P.) However, we show how to express the correctness in the language of V1, and we also show that we can prove the formula expressing correctness with polytime reasoning from Fermat's Little theorem, which is generally expected to be independent of V1. Our proof is also conceptually very basic in the sense that we use the extended Euclid's algorithm, for computing greatest common divisors, as the main workhorse of the proof. For example, we make do without proving the Chinese Reminder theorem, which is used in the standard proofs.
Witnessing Matrix Identities and Proof Complexity

Fu Li,Iddo Tzameret

DOI: https://doi.org/10.1142/s021819671850011x

2018-01-01

International Journal of Algebra and Computation

Abstract:We use results from the theory of algebras with polynomial identities (PI-algebras) to study the witness complexity of matrix identities. A matrix identity of [Formula: see text] matrices over a field [Formula: see text]is a non-commutative polynomial (f(x 1 , …, x n )) over [Formula: see text], such that [Formula: see text] vanishes on every [Formula: see text] matrix assignment to its variables. For every field [Formula: see text]of characteristic 0, every [Formula: see text] and every finite basis of [Formula: see text] matrix identities over [Formula: see text], we show there exists a family of matrix identities [Formula: see text], such that each [Formula: see text] has [Formula: see text] variables and requires at least [Formula: see text] many generators to generate, where the generators are substitution instances of elements from the basis. The lower bound argument uses fundamental results from PI-algebras together with a generalization of the arguments in [P. Hrubeš, How much commutativity is needed to prove polynomial identities? Electronic colloquium on computational complexity, ECCC, Report No.: TR11-088, June 2011]. We apply this result in algebraic proof complexity, focusing on proof systems for polynomial identities (PI proofs) which operate with algebraic circuits and whose axioms are the polynomial-ring axioms [P. Hrubeš and I. Tzameret, The proof complexity of polynomial identities, in Proc. 24th Annual IEEE Conf. Computational Complexity, CCC 2009, 15–18 July 2009, Paris, France (2009), pp. 41–51; Short proofs for the determinant identities, SIAM J. Comput. 44(2) (2015) 340–383], and their subsystems. We identify a decrease in strength hierarchy of subsystems of PI proofs, in which the [Formula: see text]th level is a sound and complete proof system for proving [Formula: see text] matrix identities (over a given field). For each level [Formula: see text] in the hierarchy, we establish an [Formula: see text] lower bound on the number of proof-steps needed to prove certain identities. Finally, we present several concrete open problems about non-commutative algebraic circuits and speed-ups in proof complexity, whose solution would establish stronger size lower bounds on PI proofs of matrix identities, and beyond.
On the Correlation of Pseudorandom Binary Sequences with Composite Moduli

Huaning Liu,Tao Zhan,Xiaoyun Wang

DOI: https://doi.org/10.5486/pmd.2009.4368

2009-01-01

Abstract:Recently J. Rivat and A. Sarkozy extended two large families of pseudorandom binary sequences to the case of composite moduli m, where m is the product of two different primes not far apart. In this paper we study the correlation measure of these sequences. Our results show that these sequences are "bad" if either m is "not large" or m is "large" but its prime factors are known.
A Note on Certain Modular Constructions of Pseudorandom Binary Sequences with Composite Moduli

Huaning Liu,Jing Gao

DOI: https://doi.org/10.1007/s10998-013-8920-7

2013-01-01

Periodica Mathematica Hungarica

Abstract:J. Rivat and A. Sárközy extended two large families of pseudorandom binary sequences to the case of composite moduli m , where m is the product of two different primes not far apart. In this paper we continue the study in this direction. We shall improve the estimates for the correlation measure of the sequences.
Extending Babbage's (Non-)Primality Tests

Jonathan Sondow

2018-12-19

Abstract:We recall Charles Babbage's 1819 criterion for primality, based on simultaneous congruences for binomial coefficients, and extend it to a least-prime-factor test. We also prove a partial converse of his non-primality test, based on a single congruence. Two problems are posed. Along the way we encounter Bachet, Bernoulli, Bezout, Euler, Fermat, Kummer, Lagrange, Lucas, Vandermonde, Waring, Wilson, Wolstenholme, and several contemporary mathematicians.

Number Theory
Fermat test with Gaussian base and Gaussian pseudoprimes

José María Grau,Antonio M. Oller-Marcén,Manuel Rodríguez,Daniel Sadornil

DOI: https://doi.org/10.1007/s10587-015-0221-2

2015-12-01

Czechoslovak Mathematical Journal

Abstract:The structure of the group (ℤ/nℤ)* and Fermat’s little theorem are the basis for some of the best-known primality testing algorithms. Many related concepts arise: Euler’s totient function and Carmichael’s lambda function, Fermat pseudoprimes, Carmichael and cyclic numbers, Lehmer’s totient problem, Giuga’s conjecture, etc. In this paper, we present and study analogues to some of the previous concepts arising when we consider the underlying group Gn:= {a + bi ∈ ℤ[i]/nℤ[i]: a2 + b2 ≡ 1 (mod n)}. In particular, we characterize Gaussian Carmichael numbers via a Korselt’s criterion and present their relation with Gaussian cyclic numbers. Finally, we present the relation between Gaussian Carmichael number and 1-Williams numbers for numbers n ≡ 3 (mod 4). There are also no known composite numbers less than 1018 in this family that are both pseudoprime to base 1 + 2i and 2-pseudoprime.

mathematics
Odd moments and adding fractions

Thomas F. Bloom,Vivian Kuperberg

2023-12-14

Abstract:We prove near-optimal upper bounds for the odd moments of the distribution of coprime residues in short intervals, confirming a conjecture of Montgomery and Vaughan. As an application we prove near-optimal upper bounds for the average of the refined singular series in the Hardy-Littlewood conjectures concerning the number of prime $k$-tuples for $k$ odd. The main new ingredient is a near-optimal upper bound for the number of solutions to $\sum_{1\leq i\leq k}\frac{a_i}{q_i}\in \mathbb{Z}$ when $k$ is odd, with $(a_i,q_i)=1$ and restrictions on the size of the numerators and denominators, that is of independent interest.

Number Theory
Sums of triangular numbers and sums of squares

Amir Akbary,Zafer Selcuk Aygin

DOI: https://doi.org/10.48550/arXiv.2107.00787

2021-07-02

Abstract:For non-negative integers $a,b,$ and $n$, let $N(a, b; n)$ be the number of representations of $n$ as a sum of squares with coefficients $1$ or $3$ ($a$ of ones and $b$ of threes). Let $N^*(a,b; n)$ be the number of representations of $n$ as a sum of odd squares with coefficients $1$ or $3$ ($a$ of ones and $b$ of threes). We have that $N^*(a,b;8n+a+3b)$ is the number of representations of $n$ as a sum of triangular numbers with coefficients $1$ or $3$ ($a$ of ones and $b$ of threes). It is known that for $a$ and $b$ satisfying $1\leq a+3b \leq 7$, we have $$ N^*(a,b;8n+a+3b)= \frac{2}{2+{a\choose4}+ab} N(a,b;8n+a+3b) $$ and for $a$ and $b$ satisfying $a+3b=8$, we have $$ N^*(a,b;8n+a+3b) = \frac{2}{2+{a\choose4}+ab} \left( N(a,b;8n+a+3b) - N(a,b; (8n+a+3b)/4) \right). %& t(8,0;{n}) = \frac{1}{36} \left( N(8,0;8n+8) - N(8,0;2n+2) \right). \label{eq31_5} $$ Such identities are not known for $a+3b>8$. In this paper, for general $a$ and $b$ with $a+b$ even, we prove asymptotic equivalence of formulas similar to the above, as $n\rightarrow\infty$. One of our main results extends a theorem of Bateman, Datskovsky, and Knopp where the case $b=0$ and general $a$ was considered. Our approach is different from Bateman-Datskovsky-Knopp's proof where the circle method and singular series were used. We achieve our results by explicitly computing the Eisenstein components of the generating functions of $N^*(a,b;8n+a+3b)$ and $N(a,b;8n+a+3b)$. The method we use is robust and can be adapted in studying the asymptotics of other representation numbers with general coefficients.

Number Theory
Lots and Lots of Perrin-Type Primality Tests and Their Pseudo-Primes

Robert Dougherty-Bliss,Doron Zeilberger

2024-04-11

Abstract:We use Experimental Mathematics and Symbolic Computation (with Maple), to search for lots and lots of Perrin- and Lucas- style primality tests, and try to sort the wheat from the chaff. More impressively, we find quite a few such primality tests for which we can explicitly construct infinite families of pseudo-primes, rather, like in the cases of Perrin pseudo-primes and the famous Carmichael primes, only proving the mere existence of infinitely many of them.

Combinatorics
Highly composite numbers and the Riemann hypothesis

Jean-Louis Nicolas

DOI: https://doi.org/10.1007/s11139-021-00392-0

2021-04-12

The Ramanujan Journal

Abstract:Let us denote by d(n) the number of divisors of n, by ${{\,\mathrm{li}\,}}(t)$ the logarithmic integral of t, by $\beta _2$ the number $\frac{\log 3/2}{\log 2}=0.584\ldots $ and by R(t) the function $t\mapsto \frac{2\sqrt{t} +\sum _\rho t^\rho /\rho ^2}{\log ^2 t}$, where $\rho $ runs over the non-trivial zeros of the Riemann $\zeta $ function. In his PHD thesis about highly composite numbers, Ramanujan proved, under the Riemann hypothesis, that
The ternary Goldbach problem

Harald Andrés Helfgott

DOI: https://doi.org/10.48550/arXiv.1404.2224

2014-04-13

Abstract:The ternary Goldbach conjecture, or three-primes problem, states that every odd number $n$ greater than $5$ can be written as the sum of three primes. The conjecture, posed in 1742, remained unsolved until now, in spite of great progress in the twentieth century. In 2013 -- following a line of research pioneered and developed by Hardy, Littlewood and Vinogradov, among others -- the author proved the conjecture. In this, as in many other additive problems, what is at issue is really the proper usage of the limited information we possess on the distribution of prime numbers. The problem serves as a test and whetting-stone for techniques in analysis and number theory -- and also as an incentive to think about the relations between existing techniques with greater clarity. We will go over the main ideas of the proof. The basic approach is based on the circle method, the large sieve and exponential sums. For the purposes of this overview, we will not need to work with explicit constants; however, we will discuss what makes certain strategies and procedures not just effective, but efficient, in the sense of leading to good constants. Still, our focus will be on qualitative improvements.

Number Theory
A number-theoretic problem concerning pseudo-real Riemann surfaces

Gareth A. Jones,Alexander K. Zvonkin

2024-01-19

Abstract:Motivated by their research on automorphism groups of pseudo-real Riemann surfaces, Bujalance, Cirre and Conder have conjectured that there are infinitely many primes $p$ such that $p+2$ has all its prime factors $q\equiv -1$ mod~$(4)$. We use theorems of Landau and Raikov to prove that the number of integers $n\le x$ with only such prime factors $q$ is asymptotic to $cx/\sqrt{\ln x}$ for a specific constant $c=0.4865\ldots$. Heuristic arguments, following Hardy and Littlewood, then yield a conjecture that the number of such primes $p\le x$ is asymptotic to $c'\int_2^x(\ln t)^{-3/2}dt$ for a constant $c'=0.8981\ldots$. The theorem, the conjecture and a similar conjecture applying the Bateman--Horn Conjecture to other pseudo-real Riemann surfaces are supported by evidence from extensive computer searches.

Number Theory
Moyennes de certaines fonctions multiplicatives sur les entiers friables, 3

Gérald Tenenbaum,Jie Wu

2024-09-22

Abstract:We consider logarithmic averages, over friable integers, of non-negative multiplicative functions. Under logarithmic, one-sided or two-sided hypotheses, we obtain sharp estimates that improve upon known results in the literature regarding both the quality of the error term and the range of validity. The one-sided hypotheses correspond to classical sieve assumptions. They are applied to provide an effective form of the Johnsen--Selberg prime power sieve.

Number Theory
Improving bounds on prime counting functions by partial verification of the Riemann hypothesis

Daniel R. Johnston

DOI: https://doi.org/10.1007/s11139-022-00616-x

2022-07-31

Abstract:Using a recent verification of the Riemann hypothesis up to height , we provide strong estimates on and other prime counting functions for finite ranges of x . In particular, we get that for . We also provide weaker bounds that hold for a wider range of x , and an application to an inequality of Ramanujan.

mathematics
Primality of numbers of the form $ap^{k}+1$

Ariko Stephen Philemon

DOI: https://doi.org/10.48550/arXiv.2005.02327

2020-05-04

Number Theory

Abstract:In 1876, Edouard Lucas showed that if an integer $b$ exists such that $b^{n-1} \equiv 1 (\mathrm{mod} \ n)$ and $b^{(n-1)/p} \not\equiv 1( \mathrm{mod} \ n)$ for all prime divisors $p$ of $n-1$ , then $n$ is prime, a result known as Lucas's converse of Fermat's little theorem. This result was considerably improved by Henry Pocklington in 1914 when he showed that it's not necessary to know all the prime factors of $n-1$ in order to determine if $n$ is prime. In this paper we optimize Pocklington's primality test for integers of the form $ap^{k}+1$ where $p$ is prime, $a<p$, $k\ge 1$. An extension of Lucas's converse of Fermat's little theorem is given. We also prove a new general-purpose primality test that requires that only a single odd prime divisor of $n-1$ be found for the test to be implemented. Contrary to the well-known result: There are infinitely many Fermat pseudoprimes to any base $b$; In this paper we prove the finitude of Fermat pseudoprimes in some forms of integers.
Generalizations of Bertrand's Postulate to Sums of Any Number of Primes

Joel E. Cohen

DOI: https://doi.org/10.1080/0025570X.2023.2231336

2023-05-06

Abstract:In 1845, Bertrand conjectured that twice any prime strictly exceeds the next prime. Tchebichef proved Bertrand's postulate in 1850. In 1934, Ishikawa proved a stronger result: the sum of any two consecutive primes strictly exceeds the next prime, except for the only equality $2+3=5$. This observation is a special case of a more general result, perhaps not previously noticed: if $p_n$ denotes the $n$th prime, $n=1, 2, \ldots$, with $p_1=2, p_2=3, \ldots$, and if $c_1, \ldots, c_g$ are nonnegative integers (not necessarily distinct), and $d_1, \ldots, d_h$ are positive integers (not necessarily distinct), and $g>h\ge 1$, then there exists a positive integer $N$ such that $p_{n-c_1}+p_{n-c_2}+\cdots +p_{n-c_g}>p_{n+d_1}+\cdots +p_{n+d_h}$ for all $n\ge N$. We prove this result using only the prime number theorem. For any instance of this result, we sketch a way to find the least possible $N$. We give some numerical results and unanswered questions.

Number Theory

Bad witnesses for a composite number

Average Case Error Estimates of the Strong Lucas Test

A Probable Prime Test With High Confidence

From Worst to Average Case to Incremental Search Bounds of the Strong Lucas Test

Composite values of shifted exponentials

A polytime proof of correctness of the Rabin-Miller algorithm from Fermat's little theorem

Witnessing Matrix Identities and Proof Complexity

On the Correlation of Pseudorandom Binary Sequences with Composite Moduli

A Note on Certain Modular Constructions of Pseudorandom Binary Sequences with Composite Moduli

Extending Babbage's (Non-)Primality Tests

Fermat test with Gaussian base and Gaussian pseudoprimes

Odd moments and adding fractions

Sums of triangular numbers and sums of squares

Lots and Lots of Perrin-Type Primality Tests and Their Pseudo-Primes

Highly composite numbers and the Riemann hypothesis

The ternary Goldbach problem

A number-theoretic problem concerning pseudo-real Riemann surfaces

Moyennes de certaines fonctions multiplicatives sur les entiers friables, 3

Improving bounds on prime counting functions by partial verification of the Riemann hypothesis

Primality of numbers of the form $ap^{k}+1$

Generalizations of Bertrand's Postulate to Sums of Any Number of Primes