CH 09
CH 09
Mathematics of
Cryptography
Part III: Primes and Related
Congruence Equations
Copyright © The McGraw-Hill Companies, Inc. Permission required for reproduction or display.
9.1
9.1.4 Euler’s Phi-Function
9.2
9.1.4 Continued
Note
The difficulty of finding (n) depends on the
difficulty of finding the factorization of n.
9.3
9.1.4 Continued
Example 9.7
What is the value of (13)?
Solution
Because 13 is a prime, (13) = (13 −1) = 12.
Example 9.8
What is the value of (10)?
Solution
We can use the third rule: (10) = (2) × (5) = 1 × 4 = 4, because 2
and 5 are primes.
9.4
9.1.4 Continued
Example 9.9
What is the value of (240)?
Solution
We can write 240 = 24 × 31 × 51. Then
Example 9.10
Can we say that (49) = (7) × (7) = 6 × 6 = 36?
Solution
No. The third rule applies when m and n are relatively prime.
Here 49 = 72. We need to use the fourth rule: (49) = 72 − 71 = 42.
9.5
9.1.4 Continued
Example 9.11
What is the number of elements in Z14*?
Solution
The answer is (14) = (7) × (2) = 6 × 1 = 6. The members are 1,
3, 5, 9, 11, and 13.
Note
Interesting point: If n > 2, the value of (n) is even.
9.6
9.1.5 Fermat’s Little Theorem
First Version
ap − 1 ≡ 1 mod p
Second Version
ap ≡ a mod p
9.7
9.1.5 Continued
Example 9.12
Find the result of 610 mod 11.
Solution
We have 610 mod 11 = 1. This is the first version of Fermat’s little
theorem where p = 11.
Example 9.13
Find the result of 312 mod 11.
Solution
Here the exponent (12) and the modulus (11) are not the same.
With substitution this can be solved using Fermat’s little theorem.
9.8
9.1.6 Euler’s Theorem
First Version
a(n) ≡ 1 (mod n)
Second Version
a k × (n) + 1 ≡ a (mod n)
Note
The second version of Euler’s theorem is used in the
RSA cryptosystem in Chapter 10.
9.9
9.1.5 Continued
Example 9.15
Example 9.16
Find the result of 2062 mod 77.
Solution
If we let k = 1 on the second version, we have
2062 mod 77 = (20 mod 77) (20(77) + 1 mod 77) mod 77
= (20)(20) mod 77 = 15.
9.10
9.6.2 Logarithm
9.11
9.6.2 Continued
9.12
9.6.2 Continued
Order of an Element
Example 9.47
Find the order of all elements in G = <Z10∗, ×>.
Solution
This group has only (10) = 4 elements: 1, 3, 7, 9. We can find the
order of each element by trial and error.
Euler’s Theorem
Example 9.48
9.14
9.6.2 Continued
Example 9.49
Table 9.4 shows that there are no primitive roots in G = <Z 8∗, ×>
because no element has the order equal to (8) = 4. The order of
elements are all smaller than 4.
9.15
9.6.2 Continued
Example 9.50
Table 9.5 shows the result of ai ≡ x (mod 7) for the group
G = <Z7∗, ×>. In this group, (7) = 6.
9.16
9.6.2 Continued
Note
The group G = <Zn*, ×> has primitive roots only if
n is 2, 4, pt, or 2pt.
Example 9.51
For which value of n, does the group G = <Zn∗, ×> have primitive
roots: 17, 20, 38, and 50?
Solution
a. G = <Z17∗, ×> has primitive roots, 17 is a prime.
b. G = <Z20∗, ×> has no primitive roots.
c. G = <Z38∗, ×> has primitive roots, 38 = 2 × 19 prime.
d. G = <Z50∗, ×> has primitive roots, 50 = 2 × 52 and 5 is a prime.
9.17
9.6.2 Continued
Note
If the group G = <Zn*, ×> has any primitive root,
the number of primitive roots is ((n)).
9.18
9.6.2 Continued
9.19
9.6.2 Continued
9.21
9.6.2 Continued
Example 9.53
Solution
We can easily use the tabulation of the discrete logarithm in
Table 9.6.
a. 4 ≡ 3x mod 7 → x = L34 mod 7 = 4 mod 7
9.22
9.6.2 Continued
9.23