/*! This file is auto-generated */ .wp-block-button__link{color:#fff;background-color:#32373c;border-radius:9999px;box-shadow:none;text-decoration:none;padding:calc(.667em + 2px) calc(1.333em + 2px);font-size:1.125em}.wp-block-file__button{background:#32373c;color:#fff;text-decoration:none} Q8E In this problem we will show tha... [FREE SOLUTION] | 91Ó°ÊÓ

91Ó°ÊÓ

In this problem we will show that if N=pq is the product of two odd primes, and if x is chosen uniformly at random between 0 and N-1, such that gcd(x,N)=1, then with probability at least role="math" localid="1658908286522" 38, the order r of x mod N is even, and more over xr2is a nontrivial square root of 1 mod N.

a) Let p be an odd prime and let x be a uniformly random number modulo p. Show that the order of x mod p is even with probability at least12 (Hint:Use Fermat’s little theorem (Section 1.3).)

b) Use the Chinese remainder theorem (Exercise 1.37) to show that with probability at least 34, the order r of x mod N is even.

c) If r is even, prove that the probability that role="math" localid="1658908648251" xr2≡±1is at most12.

Short Answer

Expert verified

a) Theorderofxmodpisevenwithprobability12b) Itisevenwithprobability34c) Theprobabilityxr2≡±1isatmost12.

Step by step solution

01

Step 1:Show that the order of x mod p is even with probability at least 12

(a)

For the given odd number p and random number modulo p, the aim is to prove that the order of x mod p is even.

Assume that r be the order of x. As per the Fermat's little theorem

xp-1=1modp

In a cyclic group, there exists an element that generates all the other elements of the group.

Because, the multiplicative group modulo p is a cycle group, elements x can be written as localid="1658909125595" gKmodpwhere cyclic group element g is generates all other elements of the group. It is given that x is uniformly random.

So, the probability of K being odd is 12. Because the value of p is odd, and the value of K is odd as well, r has to be even.

Also, the is even with probability12

Therefore, the order of x mod p is even with probability12

02

Step 2:(b)Proof using Chinese remainder theorem:

The objective is to use the Chinese remainder theorem to prove that the order r of x mod N is even.

The value of N=pq where p and q are odd prime numbers.

The Chinese remainder theorem states that choosing uniformly at random x from 0 to N or y from 0 to p-1 or z to q -1 are the same.

Assume that r-1 be the order of x-1 and r-2 be the order of x-2 .

Since, p and q are odd, N is odd too.

Also, because both the orders r-1 and r-2 are even, the probability that r is even is at least34. Because, the order r is even when either is even r-1 or r-2 is even.

Therefore, it is even with probability34.

03

Step 3:c)Proof:

The objective is to prove that the probability of is xr2≡±1atmost12 .

The Chinese theorem states that there are four roots of the 1 modulo prime number.

Among, these four roots, only two of the rootsxr2≡1modp.

Because from the possible four roots, at most two roots gives the desired result, the probability is less than or equal to 12

Therefore, the probability of isxr2≡±1atmost12

Unlock Step-by-Step Solutions & Ace Your Exams!

  • Full Textbook Solutions

    Get detailed explanations and key concepts

  • Unlimited Al creation

    Al flashcards, explanations, exams and more...

  • Ads-free access

    To over 500 millions flashcards

  • Money-back guarantee

    We refund you if you fail your exam.

Over 30 million students worldwide already upgrade their learning with 91Ó°ÊÓ!

One App. One Place for Learning.

All the tools & learning materials you need for study success - in one app.

Get started for free

Study anywhere. Anytime. Across all devices.