The complexity of class polynomial computation via floating point approximations
ENGE, Andreas
Algorithmic number theory for cryptology [TANC]
Laboratoire d'informatique de l'École polytechnique [Palaiseau] [LIX]
Lithe and fast algorithmic number theory [LFANT]
Institut de Mathématiques de Bordeaux [IMB]
Algorithmic number theory for cryptology [TANC]
Laboratoire d'informatique de l'École polytechnique [Palaiseau] [LIX]
Lithe and fast algorithmic number theory [LFANT]
Institut de Mathématiques de Bordeaux [IMB]
ENGE, Andreas
Algorithmic number theory for cryptology [TANC]
Laboratoire d'informatique de l'École polytechnique [Palaiseau] [LIX]
Lithe and fast algorithmic number theory [LFANT]
Institut de Mathématiques de Bordeaux [IMB]
< Reduce
Algorithmic number theory for cryptology [TANC]
Laboratoire d'informatique de l'École polytechnique [Palaiseau] [LIX]
Lithe and fast algorithmic number theory [LFANT]
Institut de Mathématiques de Bordeaux [IMB]
Language
en
Article de revue
This item was published in
Mathematics of Computation. 2009, vol. 78, n° 266, p. 1089-1107
American Mathematical Society
English Abstract
We analyse the complexity of computing class polynomials, that are an important ingredient for CM constructions of elliptic curves, via complex floating point approximations of their roots. The heart of the algorithm is ...Read more >
We analyse the complexity of computing class polynomials, that are an important ingredient for CM constructions of elliptic curves, via complex floating point approximations of their roots. The heart of the algorithm is the evaluation of modular functions in several arguments. The fastest one of the presented approaches uses a technique devised by Dupont to evaluate modular functions by Newton iterations on an expression involving the arithmetic-geometric mean. It runs in time $O (|D| \log^5 |D| \log \log |D|) = O (|D|^{1 + \epsilon}) = O ( h^{2 + \epsilon})$ for any $\epsilon > 0$, where $D$ is the CM discriminant and $h$ is the degree of the class polynomial. Another fast algorithm uses multipoint evaluation techniques known from symbolic computation; its asymptotic complexity is worse by a factor of $\log |D|$. Up to logarithmic factors, this running time matches the size of the constructed polynomials. The estimate also relies on a new result concerning the complexity of enumerating the class group of an imaginary-quadratic order and on a rigorously proven upper bound for the height of class polynomials.Read less <
Origin
Hal imported