Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Chng 3

CC HM S HC
Nguyn t Thng
ndthong@math.hcmus.edu.vn

B mn ng dng Tin hc
Khoa Ton - Tin hc
2010

Chng 3: Cc hm s hc

1/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Hm s hc
nh ngha
Hm s hc l hm xc nh trn tp hp cc s nguyn dng.
f:

N
n

N
f (n)

nh ngha
Mt hm s hc f c gi l nhn tnh nu vi mi m, n nguyn t
cng nhau, ta c f (mn) = f (m)f (n). Trong trng hp ng thc
ng vi mi m, n, hm f c gi l nhn tnh mnh.
Cc hm nhn tnh mnh n gin nht l f (n) = n v f (n) = 1.
Nu n = pr11 pr22 ...prkk th f (n) = f (pr11 )f (pr22 )...f (prkk ), trong f
l mt hm nhn tnh.
X
Nu f nhn tnh th F (n) =
f (d) cng nhn tnh.
d|n
Chng 3: Cc hm s hc

2/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Phi hm Euler
nh ngha
Phi hm Euler (n) l hm s hc c gi tr ti n, bng s cc s
khng vt qu n v nguyn t cng nhau vi n.
nh ngha
H thng d thu gn modulo n l tp hp gm (n) s nguyn sao cho
mi phn t ca tp hp nguyn t cng nhau vi n, v khng c hai
phn t no ng d vi nhau modulo n.
nh l
Nu r1 , r2 , ..., r(n) l mt h thng d thu gn modulo n, v a l s
nguyn dng tha gcd(a, n) = 1, th tp hp ar1 , ar2 , ..., ar(n) cng
l mt h thng d thu gn modulo n.
Chng 3: Cc hm s hc

3/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

nh l Euler
nh l (Euler)
Nu n l s nguyn dng v a l s nguyn t cng nhau vi n th
a(n) 1

mod n

S p l nguyn t khi v ch khi (p) = p 1.

Vi mi s nguyn t p, ta c (pk ) = pk pk1 .
Phi hm Euler l hm nhn tnh. Ngha l (mn) = (m)(n).

 

1
1
rk
r1 r2
Nu n = p1 p2 ...pk th (n) = n 1
... 1
.
p1
pk
X
Vi mi s nguyn dng n, ta c
(d) = n.
d|n

Chng 3: Cc hm s hc

4/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

V d v phi hm Euler
(1) = 1
(2) = 1
(3) = 2
(4) = 2.
(5) = 5 1 = 4
(7) = 7 1 = 6
(11) = 11 1 = 10.
(6) = (2)(3) = 2
(10) = (2)(5) = 4
(30) = (2)(3)(5) = 8.
(8) = (23 ) = 23 22 = 4
(9) = (32 ) = 32 3 = 6.
2(7) = 26 = 64 1 mod 7.
Chng 3: Cc hm s hc

5/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

ng d ca ly tha ln

Cc tnh cht ca Phi hm Euler c s dng tnh ng d

ca nhng ly tha rt ln. C th, ta cn tnh an mod k, trong
n l mt s nguyn ln.
Gi s ta c k = pr11 pr22 ...prss .
ri

Trong a(pi

1 mod pri i , vi i = 1, 2, ..., s.

t N l bi s chung nh nht ca cc (pri i ) th aN 1 mod k.

Nu n r mod N th an ar mod k.
6

Mt v d c th l tnh 210

mod 77.

77=11.7, (11) = 10, (7) = 6.

Bi chung nh nht ca 10 v 6 l 30. Ta c 230 1 mod 77.
6

Do 106 10 mod 30 nn 210 210 23 mod 77.

Chng 3: Cc hm s hc

6/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Hm v hm
nh ngha
Hm (n) c gi tr ti n, bng s cc c dng ca n.
Hm (n) c gi tr ti n, bng tng cc c dng ca n.
X
X
(n) =
1,
(n) =
d
d|n

d|n

(n) v (n) l cc hm nhn tnh.

Gi s n = pr11 pr22 ...prkk . Khi
(n) =

r +1
k
Y
pj j 1
pj 1
j=1

(n) =

k
Y

(rj + 1)

j=1

Chng 3: Cc hm s hc

7/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

S hon ho
nh ngha
S nguyn dng n c gi l s hon ho nu (n) = 2n.
nh l
S nguyn dng chn n l s hon ho khi v ch khi
n = 2m1 (2m 1)
vi m 2 l s nguyn sao cho 2m 1 l s nguyn t.
Cc s 6, 28, 496, 8128 l cc s hon ho.
Vi mi s nguyn t p = 2m 1, ta c mt s hon ho.
Ngi ta bit c rng, trong khong t 1 n 10200 khng c s
hon ho l. Tuy nhin, tn ti hay khng cc s hon ho l?
Chng 3: Cc hm s hc

8/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

S hon ho
Mi s hon ho c th biu din di dng tng cc s t nhin
lin tip.
6=1+2+3
28 = 1 + 2 + 3 + 4 + 5 + 6 + 7
496 = 1 + 2 + 3 + ... + 30 + 31
8128 = 1 + 2 + 3 + ... + 126 + 127

Tng o ca tt c cc c s ca s hon ho u bng 2.

1
1
1
+ + =2
2
3
6
1
1
1
1
1
+
=2
1+ + + +
2
4
7
14
28
1
1
1
1
1
1
1
1
1
1+ + + +
+
+
+
+
+
=2
2
4
8
16
31
62
124
248
496
1+

Biu din cc s hon ho di h nh phn.

6 = 110
28 = 11100
496 = 111110000
8128 = 1111111000000
Chng 3: Cc hm s hc

9/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

S nguyn t Mersenne
nh ngha
Vi m l mt s nguyn dng, Mm = 2m 1 c gi l s
Mersenne th m. Nu p l s nguyn t, v Mp cng l s nguyn
t, th Mp c gi l s nguyn t Mersenne.
nh l
Nu p l mt s nguyn t l, th mi c nguyn t ca s Mersenne
Mp u c dng 2kp + 1 vi k l s nguyn dng.
Cc s M2 , M3 , M5 , M7 l cc s nguyn t Mersenne, trong khi
M11 l hp s.
Xt
M13 = 213 1 = 8191, mi c nguyn ca M13 khng vt
qu M13 90 (nu c) u phi dng 26k + 1. Do 53 v 79
khng phi l c ca M13 nn ta kt lun M13 l s nguyn t.
Chng 3: Cc hm s hc

10/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Bc theo modulo n
nh ngha
Gi s a v n l cc s nguyn dng nguyn t cng nhau. Khi s
nguyn dng nh nht x tha ax 1 mod n c gi l bc ca a
theo modulo n. K hiu: x = ordn a.
nh l
Gi s a v n > 0 l cc s nguyn t cng nhau. Khi s nguyn x
l nghim ca phng trnh ng d ax 1 mod n khi v ch khi x
chia ht cho bc ca a theo modulo n.
H qu. ordn a chia ht (n).
H qu. ai aj mod n i j mod ordn a
Bc ca a theo modulo n lun tn ti v theo nh l Euler,
a(n) 1 mod n.
Bc ca a theo modulo n khng vt qu (n).
Chng 3: Cc hm s hc

11/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Cn nguyn thy
nh ngha
Nu r v n > 0 l cc s nguyn t cng nhau v ordn r = (n) th r
c gi l cn nguyn thy modulo n.
nh l
Nu r l cn nguyn thy theo modulo n > 0 th cc s sau lp thnh
h thng d thu gn modulo n: r1 , r2 , ..., r(n)
Vi u l mt s nguyn dng, ta c ordn ru =

ordn r
.
gcd(u, ordn r)

Vi r l cn nguyn thy modulo n > 0, ru l cn nguyn thy

modulo n khi v ch khi gcd(u, (n)) = 1.
Nu s nguyn dng n c cn nguyn thy, th n c tt c
((n)) cn nguyn thy khng ng d nhau.
Chng 3: Cc hm s hc

12/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

nh l Lagrange
nh l (Lagrange)
Gi s f (x) = an xn + an1 xn1 + ... + a1 x + a0 l a thc vi h s
nguyn modulo s nguyn t p, ng thi n > 0 v an 6 0 mod p. Khi
f (x) c nhiu nht n nghim modulo p khng ng d tng cp.
nh l
Gi s p l s nguyn t v d l mt c dng ca p 1. Khi a
thc xd 1 c ng d nghim modulo p khng ng d tng cp.
nh l
Gi s p l s nguyn t v d l mt c dng ca p 1. Khi s
cc s nguyn khng ng d c bc d modulo p l (d).
H qu. Mi s nguyn t u c cn nguyn thy.
Chng 3: Cc hm s hc

13/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

S tn ti ca cn nguyn thy
nh l
Nu p l mt s nguyn t l vi cn nguyn thy r, th hoc r, hoc
r + p l cn nguyn thy modulo p2 .
nh l
Gi s p l mt s nguyn t l, khi pk c cn nguyn thy vi mi
s dng k. Hn na, nu r l cn nguyn thy modulo p2 th r l cn
nguyn thy modulo pk vi mi s nguyn dng k.
nh l
Nu s nguyn dng n khng phi l ly tha ca mt s nguyn t
hoc hai ln ly tha ca mt s nguyn t, th n khng c cn
nguyn thy.

Chng 3: Cc hm s hc

14/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

S tn ti ca cn nguyn thy
nh l
Nu p l s nguyn t l v t l s nguyn dng, th 2pt c cn
nguyn thy. C th nu r l cn nguyn thy modulo pt th:
r l cn nguyn thy modulo 2pt khi r l.
r + pt l cn nguyn thy modulo 2pt khi r chn.
nh l
Nu a l s nguyn t l, k 3 l s nguyn th
k

a(2

)/2

k2

= a2

1 mod 2k

nh l
S nguyn dng n c cn nguyn thy khi v ch khi
n = 2, 4, pt , 2pt ,
trong p l s nguyn t l v t l mt s nguyn dng.
Chng 3: Cc hm s hc

15/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Cu hi

Tm tt c cc s t nhin n tha (n) + (n) = 2n.

Chng minh rng n l mt hp s khi v ch khi (n) > n +
X
Chng minh rng k (n) =
dk l hm nhn tnh.

n.

d|n

Chng minh rng nu p, q l cc s nguyn t l khc nhau th,

n = pq l s gi nguyn t c s 2 khi v ch khi ordq 2|(p 1) v
ordp 2|(q 1).
Chng minh rng nu p, q l cc s nguyn t l khc nhau th,
n = pq l s gi nguyn t c s 2 khi v ch khi
Mp Mq = (2p 1)(2q 1) l s gi nguyn t c s 2.

Chng 3: Cc hm s hc

16/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Cu hi

Chng minh rng hai s nguyn c tch cc c s khc nhau th

hai s nguyn khc nhau.
Chng minh rng nu n chia ht cho 24 th (n) cng chia ht
cho 24.
Chng minh rng vi mi k > 1, phng trnh (x) = k c v s
nghim.
Chng minh rng nu m c cn nguyn thy th phng trnh
x2 1 mod m ch c nghim x 1 mod m.
Gi s n l mt s c cn nguyn thy. Chng minh rng tch
ca cc s nguyn dng nh hn n v nguyn t cng nhau vi
n ng d 1 theo modulo n.

Chng 3: Cc hm s hc

17/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Chng 4

THNG D BNH PHNG

Nguyn t Thng
ndthong@math.hcmus.edu.vn

B mn ng dng Tin hc
Khoa Ton - Tin hc
2010

Chng 4: Thng d bnh phng

18/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Thng d bnh phng

nh ngha
Gi s n l mt s nguyn dng. S a c gi l mt thng d bnh
phng ca n nu gcd(a, n) = 1 v ng d x2 a mod n c nghim.
Ngc li, ta ni a l khng thng d bnh phng ca n.
B
Gi s p l mt s nguyn t l, a l s nguyn khng chia ht cho p.
Khi ng d x2 a mod p, hoc khng c nghim, hoc c ng
hai nghim khng ng d modulo p.
nh l
Nu p l mt s nguyn t l, trong cc s 1, 2, ..., p 1 c ng

p1
2

thng d bnh phng.

Chng 4: Thng d bnh phng

19/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

K hiu Legendre
nh ngha
Gi s p l mt s nguyn
t l v a l mt s nguyn khng chia ht
 
a
cho p, k hiu Legendre
c nh ngha nh sau
p
  
a
1, nu a l thng d bnh phng modulo p
=
1, nu ngc li.
p
V d vi s nguyn t p = 11, ta c:


        
1
3
4
5
9
=
=
=
=
=1
11
11
11
11
11
         
2
6
7
8
10
=
=
=
=
= 1
11
11
11
11
11

Chng 4: Thng d bnh phng

20/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Tiu chun Euler

nh l (Tiu chun Euler)
Gi s p l mt s nguyn t l, v a l s nguyn dng khng chia
ht cho p. Khi
 
p1
a
a 2
mod p
p
nh l
Gi s p l mt s nguyn t l, a v b l cc s nguyn khng chia
ht cho p. Khi :
   
a
b
(i) Nu a b mod p th
=
.
p
p
    
 2
a b
ab
a
(ii)
=
.
(iii)
= 1.
p p
p
p

Chng 4: Thng d bnh phng

21/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Mt s tnh cht khc

nh l
Nu p l s nguyn t l th

 
1
1, khi p 1 mod 4
=
1, khi p 1 mod 4
p
nh l (B Gauss)
Gi s p l s nguyn t l v gcd(a, p) = 1. Nu s lsthng d b
a
p
s
nht ca cc s nguyn a, 2a, ..., p1
2 a ln hn 2 , th p = (1) .
nh l
Nu p l mt s nguyn t l th

Chng 4: Thng d bnh phng

 
p2 1
2
= (1) 8 .
p
22/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Lut thun nghch bnh phng

nh l (Lut thun nghch bnh phng)

Gi s p v q l cc s nguyn t l, khi ta c
  
p1 q1
p q
= (1) 2 2
q
p
.
B
Gi s p l mt s nguyn t l, a l mt s l khng chia ht cho p.
p1
 

2 
X
a
ja
T (a,p)
Khi
= (1)
, trong T (a, p) =
.
p
p
j=1

Chng 4: Thng d bnh phng

23/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Mt s p dng lut thun nghch bnh phng

p dng tnh gi tr ca cc k hiu Legendre.
  

p
q
=
nu p q 3 mod 4.
q
p
   
p
q
=
nu p 1 mod 4 hoc q 1 mod 4.
q
p


V d tnh

 
 


713
23.31
23
31
=
=
.
1009
1009
1009 1009

Ta c:


 
    2       
23
1009
20
2 5
5
23
3
=
=
=
=
=
=
=
1009
23
23
23
23
5
5
   
2
5
=
= 1.
3
3


31
= 1
1009


713
Suy ra
=1
1009
Chng 4: Thng d bnh phng

24/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Mt s p dng lut thun nghch bnh phng

m

p dng chng minh kim tra Pepin: S Fermat Fm = 22 + 1

l s nguyn t khi v ch khi
3

Fm 1
2

1 mod Fm

Chiu thun:
Gi thit suy ra 3Fm 1 1 mod Fm .
Do nu Fm c c nguyn t p th 3Fm 1 1 mod p.
m
Suy ra ordp 3|Fm 1 = 22 .
Mt khc t gi thit cng suy ra ordp 3 6 |
m
Vy ordp 3 = 22 = Fm 1.

Fm 1
2

= 22

m1

T ta c Fm 1 p 1.
Nhng v p|Fm , nn Fm = p l s nguyn t.

Chiu nghch:


 
  
3
Fm
2
Lut thun nghch:
=
=
= 1.
Fm
3
3


Fm 1
3
Tiu chun Euler:
3 2
mod Fm .
Fm
Chng 4: Thng d bnh phng

25/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

K hiu Jacobi
nh ngha
Gi s n l s nguyn dng l, a nguyn t cng nhau vi n. Nu n
c phn tch ra tha s nguyn t l pr11 pr22 ...prmm , ta nh ngha k
hiu Jacobi nh sau:
h a i  a r1  a r2  a rm
=
...
n
p1
p2
pm
trong v phi l cc k hiu Legendre.
Nu n l s nguyn t th k hiu Jacobi trng vi k hiu
Legendre.
K hiu Jacobi khng cho bit phng trnh ng d x2 a
mod n c nghim hay khng.
K hiu Jacobi v k hiu Legendre c nhiu tnh cht tng t
nhau.
Chng 4: Thng d bnh phng

26/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Mt s tnh cht ca k hiu Jacobi

nh l
Gi s n l s nguyn dng l, a v b l cc s nguyn t cng nhau
vi n. Khi :
  h i 
ab
a
b
(i) Nu a b mod n th
(ii)
=
.


hai
n
n n
b
=
.
n
n
 


n2 1
n1
2
1
2
.
(iv)
= (1) 8 .
(iii)
= (1)
n
n

nh l (Lut thun nghch bnh phng i vi k hiu Jacobi)

Gi s m, n l cc s nguyn dng l v nguyn t cng nhau. Khi

h n i hmi
m1 n1
= (1) 2 2
m n
Chng 4: Thng d bnh phng

27/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Thut ton tnh k hiu Jacobi

Gi s a, b l hai s nguyn dng nguyn t cng nhau, a > b. t
R0 = a, R1 = b, v
R0
R1
...
Rn3
Rn2

=
=
...
=
=

R1 q1 + 2s1 R2
R2 q2 + 2s2 R3
... ... ...
Rn2 qn2 + 2sn2 Rn1
Rn1 qn1 + 2sn1 .1

trong sj l cc s nguyn khng m, Rj l s nguyn l b hn

Rj1 .
t:
R(a, b)

R2 1
R2 1
R12 1
+ s2 2
+ ... + sn1 n1
8
8
8
R1 1 R2 1
Rn2 1 Rn1 1
+
+ ... +
2
2
2
2

s1

Chng 4: Thng d bnh phng

28/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Thut ton tnh k hiu Jacobi

nh l
Gi s a, b l cc s nguyn dng v a > b. Khi ta c
hai
= (1)R(a,b)
b
H qu
Gi s a v b l cch si nguyn dng nguyn t cng nhau, a > b. Khi
a
, k hiu Jacobi
c th tnh c vi O((log2 b)3 ) php tnh bit.
b
S php chia trong thut ton xc nh R(a, b) khng vt qu
s php chia trong thut ton Euclid tnh gcd(a, b), ngha l
khng qu O(log2 b) php chia.
Mi php chia cn khng qu O((log2 b)2 ) php tnh bit.
xc nh sj , cn O(log2 b) php tnh bit.
tnh R(a, b), cn khng qu O((log2 b)2 ) php tnh bit.
Chng 4: Thng d bnh phng

29/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

S gi nguyn t Euler
Theo tiu chun Euler, nu p l s nguyn t l v b khng chia
ht cho p th
 
p1
b
b 2
mod p
p
Nh vy, nu n v b nguyn t cng nhau v
 
n1
b
b 2 6
mod n,
n
trong v phi l k hiu Jacobi, th n phi l hp s.
Tuy nhin, nu ng d thc trn ng, th ta cng khng th
kt lun n l nguyn t hay khng.
nh ngha
S nguyn dng n c gi l s gi nguyn t Euler c s b nu n
l hp s v
 
n1
b
2
b

mod n,
n
Chng 4: Thng d bnh phng

30/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

S gi nguyn t Fermat v s gi nguyn t Euler

nh l
Mi s gi nguyn t Euler c s b u l s gi nguyn t Fermat c
s b.
iu ngc li khng ng. Chng hn s 431 l s gi nguyn t
Fermat c s 2, nhng khng l s gi nguyn t Euler c s 2.
nh l
Mi s gi nguyn t Fermat mnh c s b u l s gi nguyn t
Euler c s b.
iu ngc li khng ng. Chng hn s 1105 l s gi nguyn
t Euler c s 2, nhng khng phi l s gi nguyn t mnh
Fermat c s 2.

Chng 4: Thng d bnh phng

31/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

S gi nguyn t Fermat v s gi nguyn t Euler

nh l
S n gi nguyn t Euler c s
 bl s gi nguyn t mnh Fermat c
b
s b nu n 3 mod 4, hoc
= 1.
n
B
Gi s n l mt s nguyn dng l khng chnh phng. Khi tn
b
ti t nht mt s b vi 1 < b < n, gcd(b, n) = 1, sao cho
= 1.
n
B
Vi mi hp s l n, tn ti t nht mt s b sao cho 1 < b < n,
b
n1
gcd(b, n) = 1, v b 2 6
mod n.
n
Chng 4: Thng d bnh phng

32/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Thut ton Solovay-Strassen

nh l
s nguyn dng b
i vi mi hp s l n, tn ti khng qu (n)
2
nh hn n, nguyn t cng nhau vi n, sao cho n l s gi nguyn t
Euler c s b.
Nu n l hp s l, chn b chn ngu nhin trong cc s 1, 2, ...,
n 1, th xc sut n gi nguyn t Euler c s b s b hn 21 .
nh l (Thut ton Solovay - Strassen)
Cho n l mt s nguyn dng. Chn ngu nhin k s b1 , b2 , ..., bk t
cc s 1, 2, ..., n 1. Vi mi b, kim tra ng d thc sau
 
n1
bj
2

bj
mod n
n
Nu n l s nguyn t, mi ng d thc u ng.
Nu n l hp s, xc sut mi ng d thc ng s b hn 1/2k .
Chng 4: Thng d bnh phng

33/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Thut ton Solovay-Strassen

Vi k ln v n tri qua c kim tra xc sut vi k c s

ngu nhin, th hu nh chc chn n l s nguyn t.
Do mi s gi nguyn t mnh Fermat c s b u l s gi
nguyn t Euler c s b, nn s cc s n tri qua c kim tra
xc sut Rabin - Miller cng s tri qua c kim tra xc sut
Solovay - Strassen.
V d s n tri qua c kim tra xc sut Solovay - Strassen vi
k = 40 c s ngu nhin khc nhau, th xc sut n l hp s s
b hn 240 .

Chng 4: Thng d bnh phng

34/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Cu hi

Chng minh rng 1105 l s gi nguyn t Euler c s 2 v khng

gi nguyn t mnh Fermat c s 2.

Chng minh rng nu n l s gi nguyn t Euler c s a v b th

n cng gi nguyn t Euler c s ab.

Chng minh rng nu n l s gi nguyn t Euler c s b th n

cng l s gi nguyn t Euler c s n b.

Chng 4: Thng d bnh phng

35/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Chng 5

NG CONG ELLIPTIC
Nguyn t Thng
ndthong@math.hcmus.edu.vn

B mn ng dng Tin hc
Khoa Ton - Tin hc
2010

Chng 5: ng cong Elliptic

36/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

ng cong Elliptic
nh ngha
ng cong Elliptic trn trng K l tp hp cc im (x, y) tha
mn phng trnh
y 2 + a1 xy + a3 y = x3 + a2 x2 + a4 x + a6

(1)

F (x, y) = y 2 + a1 xy + a3 y x3 a2 x2 a4 x a6 = 0

(2)

hay

vi mt im O gi l im v cng.
Phng trnh (1) phi tha mn iu kin khng k d, tc l, ti mi
F
F
v
khng ng thi bng 0.
im (x, y), cc o hm ring
x
y

Chng 5: ng cong Elliptic

37/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

ng cong Elliptic - Nhm Abel

nh l
ng cong Elliptic c trang b php cng v tr thnh nhm Abel
nh sau:
Phn t 0 l im ti v cng O.
im (x, y) c nghch o l im (x, y a1 x a3 ).
Hai im P = (xP , yP ) v Q = (xQ , yQ ) khng phi nghch o
ca nhau th R = P + Q, R = (xR , yR ) c xc nh nh sau:
xR = xP xQ a2 + m(m + a1 )
yR = yP a3 a1 xR + m(xP xR )
trong
m=

yP yQ
nu P 6= Q.
xP xQ

m=

3x2P + 2a2 xP + a4 a1 yP
nu P = Q.
2yP + a1 xP + a3

Chng 5: ng cong Elliptic

38/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

ng cong Elliptic - Dng Weierstrass

Nu ta t
Y = 2y + a1 x + a3
a2 + 4a2
X =x+ 1
12
th ta c th a phng trnh (1) v dng
Y 2 = 4X 3 + c4 X + c6
n gin hn, ta c dng Weierstrass ca ng cong
y 2 = x3 + a4 x + a6
Khi bit thc ca ng cong l
= 16(4a34 + 27a26 )
Nh vy iu kin ng cong khng k d (khng c nghim bi):
4a34 + 27a26 6= 0
Chng 5: ng cong Elliptic

39/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Php cng trn ng cong Elliptic

Hnh: Php cng trn ng cong Elliptic.

Chng 5: ng cong Elliptic

40/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Php cng trn ng cong Elliptic

Vi ng cong Elliptic dng Weierstrass y 2 = x3 + ax + b, ta c cc
cng thc tnh nh sau:
R=P +Q
2
yQ yP
xP xQ
xQ xP


yQ yP
yR = yP +
(xP xR )
xQ xP
R = 2P = P + P
 2
2
3xP + a
xR =
2xP
2yP

 2
3xP + a
(xP xR )
yR = yP +
2yP


xR =

Chng 5: ng cong Elliptic

41/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

ng cong Elliptic v cc h m ha
nh l
Cho E l mt ng cong Elliptic trn trng hu hn Fq v P l mt
im trn ng cong. Khi c th tnh ta ca im kP bng
O(log k log3 q) php tnh bit.
Ta dng phng php nhn i lin tip tnh kP , chng hn
205P = (2(2(2(2(2(2(2P + P ))) + P ) + P ))) + P
gm 7 php nhn i mt im v 4 php cng hai im. Nh
vy, tnh kP t k v P cho trc, ta cn thi gian a thc.
Gi s B v P = kB cc im ca ng cong Elliptic E trn
trng hu hn Fq , q = pr , p 6= 2, ta ni k l logarit c s B ca
P.
Bi ton tm logarit ca cc im trn ng cong Elliptic i
hi thi gian m, v khng th kt thc trong khong thi gian
chp nhn c.
Chng 5: ng cong Elliptic

42/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Mt m kha cng khai

Gi s c mt tp hp n c th cn trao i thng tin mt vi

nhau: A1 , A2 , ..., An . Trc tin ta chn mt ng cong Elliptic
E trn trng hu hn Fq vi mt im B E lm c s. q l
mt s ln, v tt c thng tin trn u c cng khai.
Sau , mi c th Aj chn cho mnh mt kha b mt l mt s
nguyn ej no . Khi , kha cng khai ca cc c th ny l
ej B.
Gi s Aj cn gi thng bo mt l im Pm trn ng cong E
cho Ai . Khi Aj s chn ngu nhin mt s nguyn s v gi cho
Ai cp im (sB, Pm + s(ei B)).
Khi nhn c cp im ny, Ai tin hnh gii m bng cch ly
im sau tr i ei ln im trc.

Chng 5: ng cong Elliptic

43/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

Mt m tng t m

Chn trc mt ng cong Elliptic E trn trng hu hn Fq

c N im v cng khai cc thng tin ny. Ngi ta chng minh
c rng vi mi im P thuc ng cong E th N P = 0.
Mi c th Ai chn cho mnh mt kha b mt ei l s nguyn
nm gia 1 v N sao cho gcd(ei , N ) = 1. Bng thut ton
Euclide, Ai tm c di tha mn di ei 1 (mod N ).
Gi s Ai cn gi mt im Pm cho Aj , cc bc c thc hin
nh sau:
Ai
Aj
Ai
Aj

gi cho Aj thng ip ei Pm .
gi tr li cho Ai thng ip ej (ei Pm ).
gi cho Aj thng ip di (ej (ei Pm )).
gii m bng cch tnh dj (di (ej (ei Pm ))) = (1 + sN )Pm = Pm .

Chng 5: ng cong Elliptic

44/45

Cc hm s hc

Thng d bnh phng

ng cong Elliptic

nh x s nguyn m thnh im Pm trn

(E) : y 2 = x3 + ax + b
Vi s k cho trc, xc sut ta khng tm c im Pm
khng vt qu 2k .
Gi s s m nm trong khong 1 m M . Ta chn q = pr sao
cho q > M k.
Ta tng ng mt s nguyn s q vi mt phn t trong trng
hu hn Fq nh sau:
s (c0 , c1 , ..., cr1 )p x =

r1
X

ci ti

i=0

Ta ln lt tm cc xj ng vi cc s sj , trong
sj = mk + j (m + 1)k M k < q.
Vi mi xj , ta tnh Yj = x3j + axj + b. Nu tn ti yj Fq sao
cho Yj = yj2 th ta tng ng m vi Pm = (xj , yj ).
Chng 5: ng cong Elliptic

45/45