Discrete Logarithm Over Finite Fields

Let FpnF_{p^n} denote the finite field of pnp^n elements, where pp is a prime. Let xx be a generator for the multiplicative group of FpnF_{p^n}. The discrete logarithm problem over FpnF_{p^n} is to compute, for any given nonzero hFpnh \in F_{p^n}, the least nonnegative integer ee such that xe=hx^e=h. In this context we shall write e=logxhe=\log_x h.

Parameters

  • nn: number of digits/bits in the order of the finite group

Filters

Computational Model

Randomization

Approximation

Algorithms Table

Displaying 7 of 7 algorithms

See more
Function Field Sieve (FFS)1999O(exp((1+o(1))(32n/9)1/3(logn)2/3))O(\exp((1+o(1))(32n/9)^{1/3}(\log n)^{2/3})), under assumption about numbers in a sequence behaving randomly in a given rangeO(n2/3)O(n^{2/3})
Number Field Sieve (NFS)1990O(exp((1+o(1))(64n/9)1/3(logn)2/3))O(\exp((1+o(1))(64n/9)^{1/3}(\log n)^{2/3})), under assumption about numbers in a sequence behaving randomly in a given rangeO(n2/3)O(n^{2/3})
Pohlig-Hellman1978O(2n)O(2^{\sqrt{n}})O(2n)O(2^{\sqrt{n}}) (though only for primes)
Pollard's rho algorithm1978O(2n/2)O(2^{n/2})O(1)O(1)
Pollard's kangaroo algorithm1978O(2n)O(2^n)O(1)O(1)
Baby-step Giant-step1971O(2n)O(2^{\sqrt{n}})O(2n)O(2^{\sqrt{n}})
Trial Multiplication1940O(2n)O(2^n)O(1)O(1)

Reductions Table

Insuffient Data to display table

Other relevant algorithms

Insuffient Data to display table