Refined Analysis to the Extended Tower Number Field Sieve
Yuqing Zhu,Jiejing Wen,Jincheng Zhuang,Chang Lv,Dongdai Lin
DOI: https://doi.org/10.1016/j.tcs.2020.01.010
IF: 1.002
2020-01-01
Theoretical Computer Science
Abstract:The hardness of discrete logarithm problem over finite fields is the security foundation of many cryptographic protocols. When the characteristic of the finite field is medium or large, the state-of-art algorithms for solving the corresponding problem are the number field sieve and its variants. In 2016, Kim and Barbulescu presented the extended tower number field sieve, which achieves a new complexity in the medium prime case and imposes a new estimation of the security of concrete parameters in certain cryptosystems such as pairing-based cryptosystems. In this paper, a refined analysis to this algorithm is given as follows. – Firstly, a uniform formula is given for the total complexity of the extended tower number field sieve. For a given polynomial selection method, this formula can directly give the complexity in this case. – Then, a method is proposed to improve the computation in the smoothing phase by exploring subfield structures when the extension degree is composite. – At last, the complexity of the descent phase is analyzed when sieving over degree-one polynomials and high-degree polynomials respectively and it is shown still negligible compared to the improved smoothing phase.