Discrete logarithms in finite fields and their cryptographic significance

A. M. Odlyzko

doi:10.1007/3-540-39757-4_20

Discrete logarithms in finite fields and their cryptographic significance

A. M. Odlyzko

School of Mathematics

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

231 Scopus citations

Abstract

Given a primitive element g of a finite field GF(q), the discrete logarithm of a nonzero element u ∈ GF(q) is that integer k, 1 ≤ k ≤ q−1, for which u = g ^k. The well-known problem of computing discrete logarithms in finite fields has acquired additional importance in recent years due to its applicability in cryptography. Several cryptographic systems would become insecure if an efficient discrete logarithm algorithm were discovered. This paper surveys and analyzes known algorithms in this area, with special attention devoted to algorithms for the fields GF(2ⁿ). It appears that in order to be safe from attacks using these algorithms, the value of n for which GF(2ⁿ) is used in a cryptosystem has to be very large and carefully chosen. Due in large part to recent discoveries, discrete logarithms in fields GF(2ⁿ) are much easier to compute than in fields GF(p) with p prime. Hence the fields GF(2ⁿ) ought to be avoided in all cryptographic applications. On the other hand, the fields GF(p) with p prime appear to offer relatively high levels of security.

Original language	English (US)
Title of host publication	Advances in Cryptology
Subtitle of host publication	Proceedings of EUROCRYPT 1984 - A Workshop on the Theory and Application of Cryptographic Techniques
Editors	Thomas Beth, Norbert Cot, Ingemar Ingemarsson
Publisher	Springer Verlag
Pages	224-314
Number of pages	91
ISBN (Print)	9783540160762
DOIs	https://doi.org/10.1007/3-540-39757-4_20
State	Published - 1985
Event	3rd Workshop on the Theory and Application of of Cryptographic Techniques, EUROCRYPT 1984 - Paris, France Duration: Apr 9 1984 → Apr 11 1984

Publication series

Name	Lecture Notes in Computer Science
Volume	209 LNCS
ISSN (Print)	0302-9743
ISSN (Electronic)	1611-3349

Conference

Conference	3rd Workshop on the Theory and Application of of Cryptographic Techniques, EUROCRYPT 1984
Country/Territory	France
City	Paris
Period	4/9/84 → 4/11/84

Bibliographical note

Publisher Copyright:
© 1985, Springer-Verlag Berlin Heidelberg.

Publisher link

10.1007/3-540-39757-4_20

Find It

Find It at U of M Libraries

Cite this

Odlyzko, A. M. (1985). Discrete logarithms in finite fields and their cryptographic significance. In T. Beth, N. Cot, & I. Ingemarsson (Eds.), Advances in Cryptology: Proceedings of EUROCRYPT 1984 - A Workshop on the Theory and Application of Cryptographic Techniques (pp. 224-314). (Lecture Notes in Computer Science; Vol. 209 LNCS). Springer Verlag. https://doi.org/10.1007/3-540-39757-4_20

Discrete logarithms in finite fields and their cryptographic significance. / Odlyzko, A. M.
Advances in Cryptology: Proceedings of EUROCRYPT 1984 - A Workshop on the Theory and Application of Cryptographic Techniques. ed. / Thomas Beth; Norbert Cot; Ingemar Ingemarsson. Springer Verlag, 1985. p. 224-314 (Lecture Notes in Computer Science; Vol. 209 LNCS).

Research output: Chapter in Book/Report/Conference proceeding › Conference contribution

Odlyzko, AM 1985, Discrete logarithms in finite fields and their cryptographic significance. in T Beth, N Cot & I Ingemarsson (eds), Advances in Cryptology: Proceedings of EUROCRYPT 1984 - A Workshop on the Theory and Application of Cryptographic Techniques. Lecture Notes in Computer Science, vol. 209 LNCS, Springer Verlag, pp. 224-314, 3rd Workshop on the Theory and Application of of Cryptographic Techniques, EUROCRYPT 1984, Paris, France, 4/9/84. https://doi.org/10.1007/3-540-39757-4_20

@inproceedings{ebd5cf70c8a4478daa5a93c59ae46e52,

title = "Discrete logarithms in finite fields and their cryptographic significance",

abstract = "Given a primitive element g of a finite field GF(q), the discrete logarithm of a nonzero element u ∈ GF(q) is that integer k, 1 ≤ k ≤ q−1, for which u = g k. The well-known problem of computing discrete logarithms in finite fields has acquired additional importance in recent years due to its applicability in cryptography. Several cryptographic systems would become insecure if an efficient discrete logarithm algorithm were discovered. This paper surveys and analyzes known algorithms in this area, with special attention devoted to algorithms for the fields GF(2n). It appears that in order to be safe from attacks using these algorithms, the value of n for which GF(2n) is used in a cryptosystem has to be very large and carefully chosen. Due in large part to recent discoveries, discrete logarithms in fields GF(2n) are much easier to compute than in fields GF(p) with p prime. Hence the fields GF(2n) ought to be avoided in all cryptographic applications. On the other hand, the fields GF(p) with p prime appear to offer relatively high levels of security.",

author = "Odlyzko, \{A. M.\}",

note = "Publisher Copyright: {\textcopyright} 1985, Springer-Verlag Berlin Heidelberg.; 3rd Workshop on the Theory and Application of of Cryptographic Techniques, EUROCRYPT 1984 ; Conference date: 09-04-1984 Through 11-04-1984",

year = "1985",

doi = "10.1007/3-540-39757-4\_20",

language = "English (US)",

isbn = "9783540160762",

series = "Lecture Notes in Computer Science",

publisher = "Springer Verlag",

pages = "224--314",

editor = "Thomas Beth and Norbert Cot and Ingemar Ingemarsson",

booktitle = "Advances in Cryptology",

}

TY - GEN

T1 - Discrete logarithms in finite fields and their cryptographic significance

AU - Odlyzko, A. M.

PY - 1985

Y1 - 1985

N2 - Given a primitive element g of a finite field GF(q), the discrete logarithm of a nonzero element u ∈ GF(q) is that integer k, 1 ≤ k ≤ q−1, for which u = g k. The well-known problem of computing discrete logarithms in finite fields has acquired additional importance in recent years due to its applicability in cryptography. Several cryptographic systems would become insecure if an efficient discrete logarithm algorithm were discovered. This paper surveys and analyzes known algorithms in this area, with special attention devoted to algorithms for the fields GF(2n). It appears that in order to be safe from attacks using these algorithms, the value of n for which GF(2n) is used in a cryptosystem has to be very large and carefully chosen. Due in large part to recent discoveries, discrete logarithms in fields GF(2n) are much easier to compute than in fields GF(p) with p prime. Hence the fields GF(2n) ought to be avoided in all cryptographic applications. On the other hand, the fields GF(p) with p prime appear to offer relatively high levels of security.

AB - Given a primitive element g of a finite field GF(q), the discrete logarithm of a nonzero element u ∈ GF(q) is that integer k, 1 ≤ k ≤ q−1, for which u = g k. The well-known problem of computing discrete logarithms in finite fields has acquired additional importance in recent years due to its applicability in cryptography. Several cryptographic systems would become insecure if an efficient discrete logarithm algorithm were discovered. This paper surveys and analyzes known algorithms in this area, with special attention devoted to algorithms for the fields GF(2n). It appears that in order to be safe from attacks using these algorithms, the value of n for which GF(2n) is used in a cryptosystem has to be very large and carefully chosen. Due in large part to recent discoveries, discrete logarithms in fields GF(2n) are much easier to compute than in fields GF(p) with p prime. Hence the fields GF(2n) ought to be avoided in all cryptographic applications. On the other hand, the fields GF(p) with p prime appear to offer relatively high levels of security.

UR - https://www.scopus.com/pages/publications/84957014368

UR - https://www.scopus.com/pages/publications/84957014368#tab=citedBy

U2 - 10.1007/3-540-39757-4_20

DO - 10.1007/3-540-39757-4_20

M3 - Conference contribution

AN - SCOPUS:84957014368

SN - 9783540160762

T3 - Lecture Notes in Computer Science

SP - 224

EP - 314

BT - Advances in Cryptology

A2 - Beth, Thomas

A2 - Cot, Norbert

A2 - Ingemarsson, Ingemar

PB - Springer Verlag

T2 - 3rd Workshop on the Theory and Application of of Cryptographic Techniques, EUROCRYPT 1984

Y2 - 9 April 1984 through 11 April 1984

ER -

Discrete logarithms in finite fields and their cryptographic significance

Abstract

Publication series

Conference

Bibliographical note

Publisher link

Find It

Other files and links

Fingerprint

Cite this