2019
DOI: 10.2140/obs.2019.2.293
|View full text |Cite
|
Sign up to set email alerts
|

Faster integer multiplication using short lattice vectors

Abstract: We prove that n-bit integers may be multiplied in O(n log n 4 log * n ) bit operations. This complexity bound had been achieved previously by several authors, assuming various unproved number-theoretic hypotheses. Our proof is unconditional, and depends in an essential way on Minkowski's theorem concerning lattice vectors in symmetric convex sets.

Help me understand this report
View preprint versions

Search citation statements

Order By: Relevance

Paper Sections

Select...
1
1
1
1

Citation Types

0
18
0

Year Published

2019
2019
2021
2021

Publication Types

Select...
4
3

Relationship

3
4

Authors

Journals

citations
Cited by 21 publications
(18 citation statements)
references
References 28 publications
0
18
0
Order By: Relevance
“…All arithmetic in the algorithm above operates with at most R-bit numbers, where R is chosen to be Θ (N log(N/ )). The number of elementary bit operations (AN D, OR, N OT ) to perform one basic arithmetic operation (+, −, ×, /) on u-bit numbers is upper bounded by O(u polylog(u)) [18]. 10 Let us count the number of arithmetic operations.…”
Section: Computational Complexitymentioning
confidence: 99%
“…All arithmetic in the algorithm above operates with at most R-bit numbers, where R is chosen to be Θ (N log(N/ )). The number of elementary bit operations (AN D, OR, N OT ) to perform one basic arithmetic operation (+, −, ×, /) on u-bit numbers is upper bounded by O(u polylog(u)) [18]. 10 Let us count the number of arithmetic operations.…”
Section: Computational Complexitymentioning
confidence: 99%
“…Õ (n) for integers of bit size ⩽n. In fact at present time the best known complexity bound for the product is O n log n 4 log * n , where log * n = min k ∈ ℕ: log … k× log n ⩽1 ; see [29,30,31] and historical references therein. Integer divisions and extended gcds in bit size ⩽n also take softly linear time [64].…”
Section: Integersmentioning
confidence: 99%
“…Concretely, for CSIDH-512, [11, online versions 1, 2, 3] claim 2 29.5 qubits, and [11, online versions 4, 5, 6] claim 2 31 qubits. However, no justification is provided for the claim that the number of qubits for the oracle "can be neglected".…”
Section: Comparison To Previous Claims Regarding Query Cost Bonnetaimentioning
confidence: 99%