From Worst to Average Case to Incremental Search Bounds of the Strong Lucas Test

Semira Einsele,Gerhard Wunder
2024-06-07
Abstract:The strong Lucas test is a widely used probabilistic primality test in cryptographic libraries. When combined with the Miller-Rabin primality test, it forms the Baillie-PSW primality test, known for its absence of false positives, undermining the relevance of a complete understanding of the strong Lucas test. In primality testing, the worst-case error probability serves as an upper bound on the likelihood of incorrectly identifying a composite as prime. For the strong Lucas test, this bound is $4/15$ for odd composites, not products of twin primes. On the other hand, the average-case error probability indicates the probability that a randomly chosen integer is inaccurately classified as prime by the test. This bound is especially important for practical applications, where we test primes that are randomly generated and not generated by an adversary. The error probability of $4/15$ does not directly carry over due to the scarcity of primes, and whether this estimate holds has not yet been established in the literature. This paper addresses this gap by demonstrating that an integer passing $t$ consecutive test rounds, alongside additional standard tests of low computational cost, is indeed prime with a probability greater than $1-(4/15)^t$ for all $t\geq 1$. Furthermore, we introduce error bounds for the incremental search algorithm based on the strong Lucas test, as there are no established bounds up to date as well. Rather than independent selection, in this approach, the candidate is chosen uniformly at random, with subsequent candidates determined by incrementally adding 2. This modification reduces the need for random bits and enhances the efficiency of trial division computation further.
Cryptography and Security,Number Theory
What problem does this paper attempt to address?
This paper attempts to solve the error probability problems of the strong Lucas primality test in the worst - case and average - case scenarios, especially the error probability when the test passes through multiple consecutive rounds. Specifically: 1. **Worst - case error probability**: For the strong Lucas test, the worst - case error probability is $\frac{4}{15}$, which means that the maximum probability that a composite number is misidentified as a prime number is $\frac{4}{15}$. However, whether this probability is applicable to all cases has not been fully verified. 2. **Average - case error probability**: In the average - case scenario, the probability that a randomly selected integer is misclassified as a prime number is more important, especially in practical applications, such as the random prime numbers generated in encryption algorithms. 3. **Error probability of multi - round tests**: The paper attempts to prove that if an integer passes $t$ rounds of the strong Lucas test, along with some standard tests with low computational cost, then the probability that this integer is indeed a prime number is greater than $1-\left(\frac{4}{15}\right)^t$, for all $t\geq1$. In addition, the paper also introduces the error bounds of the incremental search algorithm based on the strong Lucas test. In this method, the candidate numbers are not independently and randomly selected, but are determined by starting from an initially randomly selected candidate number and then adding 2 step by step for subsequent candidate numbers. This method reduces the need for random bits and improves the efficiency of trial - division calculations. ### Main contributions 1. **Proving error probability bounds**: One of the main contributions of the paper is to prove that for all $k\geq2$ and $t\geq1$, the error probability $q_{k,t}\leq\left(\frac{4}{15}\right)^t$ holds. To do this, the author uses the methods previously established for the Miller - Rabin test and adapts them to the strong Lucas test. 2. **Error bounds of the incremental search algorithm**: The paper also derives the error bounds of the incremental search algorithm, filling this gap in the field. ### Method overview To prove the main results, the author introduces some important lemmas and theorems and uses functions and techniques in number theory. For example: - Introduces $\alpha_D(n)=\frac{SL(D,n)}{n - \epsilon_D(n)-1}$, which represents the proportion of $(P, Q)$ pairs that make $n$ a strong Lucas pseudoprime. - Uses conditional probability and Bayes' theorem to estimate the error probability. - Gradually narrows the upper bound of the error probability through piecewise summation and optimal parameter selection. These methods ultimately prove that the error probability of the strong Lucas test in multi - round tests does indeed satisfy the required bounds, thus providing theoretical support for the reliability of the strong Lucas test in practical applications.