Rabin-miller Primality Test: Composite Numbers Which Pass It

نویسنده

  • F. ARNAULT
چکیده

The Rabin-Miller primality test is a probabilistic test which can be found in several algebraic computing systems (such as Pari, Maple, ScratchPad) because it is very easy to implement and, with a reasonable amount of computing, indicates whether a number is composite or "probably prime" with a very low probability of error. In this paper, we compute composite numbers which are strong pseudoprimes to several chosen bases. Because these bases are those used by the Scratchpad implementation of the test, we obtain, by a method which differs from a recent one by Jaeschke, composite numbers which are found to be "probably prime" by this test. 1. Preliminaries First, we recall the following definitions: 1.1. Definitions. Let ¿> e N*. A number n e N* is a pseudoprime to base b if bn~x = 1 modulo n. It is a strong pseudoprime to base b if it is odd and if one of the following conditions is satisfied, with n 1 = 2kq and q odd: b9 = 1 modulo n or there exists an integer i such that 0 < i < k and b2q = -1 modulo n . The Rabin-Miller test consists in, given an odd number n, checking if n is a strong pseudoprime to several bases which are either chosen randomly or taken in a predetermined set, depending on the implementation. If n is not a strong pseudoprime to some of the chosen bases, n is proved to be composite. Conversely, Rabin has shown in [12] that if « is a strong pseudoprime to k bases, it is "probably prime" with an error probability of less than 1/4* . This test is implemented in the Computing Algebra System Scratchpad, in which the bases used are the first ten prime numbers 2, 3, 5, 7, 11, 13, 17, 19, 23, 29. In this paper, we compute a composite number which is a strong pseudoprime to these bases. So, this number passes the Scratchpad test. In order to show that Received by the editor February 7, 1992 and, in revised form, October 15, 1992. 1991 Mathematics Subject Classification. Primary 11A15, 11A51, 11Y11.

منابع مشابه

Improving the Speed and Accuracy of the Miller-Rabin Primality Test

Currently, even the fastest deterministic primality tests run slowly, with the AgrawalKayal-Saxena (AKS) Primality Test runtime Õ(log(n)), and probabilistic primality tests such as the Fermat and Miller-Rabin Primality Tests are still prone to false results. In this paper, we discuss the accuracy of the Miller-Rabin Primality Test and the number of nonwitnesses for a composite odd integer n. We...

متن کامل

The Miller–rabin Test

The Fermat and Solovay–Strassen tests are each based on translating a congruence modulo prime numbers, either Fermat’s little theorem or Euler’s congruence, over to the setting of composite numbers and hoping to make it fail there. The Miller–Rabin test uses a similar idea, but involves a system of congruences. For an odd integer n > 1, factor out the largest power of 2 from n− 1, say n− 1 = 2e...

متن کامل

Breaking a Cryptographic Protocol with Pseudoprimes

The Miller-Rabin pseudo primality test is widely used in cryptographic libraries, because of its apparent simplicity. But the test is not always correctly implemented. For example the pseudo primality test in GNU Crypto 1.1.0 uses a fixed set of bases. This paper shows how this flaw can be exploited to break the SRP implementation in GNU Crypto. The attack is demonstrated by explicitly construc...

متن کامل

An Optimization Algorithm of Rsa Key Generation in Embedded System

To reduce the time complexity, this paper proposes an optimization algorithm to generate the large prime number. Before the primality test, an improved prescreening algorithm is used to get rid of most of odd composite numbers. Then we introduce the Fermat’s little theorem to make a further judgement, which can decrease the times of using prescreening algorithm. At last, Miller-Rabin algorithm ...

متن کامل

Four primality testing algorithms

Four primality testing algorithms Introduction. In this expository paper we describe four primality tests. The first test is very efficient, but is only capable of proving that a given number is either composite or 'very probably' prime. The second test is a deterministic polynomial time algorithm to prove that a given numer is either prime or composite. The third and fourth primality tests are...

متن کامل

ذخیره در منابع من


  با ذخیره ی این منبع در منابع من، دسترسی به آن را برای استفاده های بعدی آسان تر کنید

متن کامل
عنوان ژورنال:

دوره   شماره 

صفحات  -

تاریخ انتشار 2010