Warning: foreach() argument must be of type array|object, bool given in /var/www/html/web/app/themes/studypress-core-theme/template-parts/header/mobile-offcanvas.php on line 20

Quadratic residues. Fix a positive integer N. We say that a is a quadratic residue modulo N ifthere exists a such that ax2modN.
(a) Let N be an odd prime and be a non-zero quadratic residue modulo N. Show that there are exactly two values in{0,1,....,N-1} satisfying x2amodN.
(b) Show that if N is an odd prime, there are exactly(N+1)2 quadratic residues in {0,1,...,N-1}.
(c) Give an example of positive integers a and N such thatx2amodNhas more than two solutions in {0,1,...,N-1}.

Short Answer

Expert verified

(a) it is proved that there are only two possible values, which are x and N-x.

(b) It is proved that, if N is an odd prime, we have exactlyN+12 quadratic residues.

(c) The example is, “ x21mod8has more than solution1,3,5,7 for the set of values 0,1,2,3,4,5,6,7.”

Step by step solution

01

Explanation of (a)

The two values satisfying x2amodN.

Since is the non-zero quadratic residue mod N, the two values can be identifies using the following steps.

Then,

x,y0,1,...,N-1

The equation is,

x2y2modN

Thus,

x2-y2=x+yx-y

From the case 1, N divides x-y.

If we dividex-y by N, thenxymodN that can be written asx=y because the value x and y are inside the set of 1,2,...,N-1.

From the case 2, N divides x+y.

If x+yis inside of the limit, then N can dividex+y with the condition x+y=N, which can be written as y=N-x.

Thus, the only two possible values are x and N-x.

02

Explanation of (b)

To show that there are exactlyN+12 quadratic residues.

In the range of 0,1,...,N-1, clearly 0 is a quadratic residue since 02=0modN.

Then, we take the range of quadratic residue as1,2,...,N-12 .

For the odd prime value N, the equation is,

x2y20modN

Assuming towards contradiction,

x2y2modNx-yx+y0modN

Since N is a prime value, the Equationxy

Then, x+yN.

The two distinct elements xand y is of sizeN-12 quadratic residues, since the elements x and y are non-zero quadratic residues.

03

Explanation of (c)

Showing thatx2amodNhas more than two solutions

In the range of 0,1,...,N-1, clearly we cannot take N=0,2or any odd prime.

Therefore, we take the value of N as 8 and the value .

The equation can be written like x21mod8.

Use value of x as0,1,2,3,4,5,6,7

Substituting the value of x as 0 in the equation,

localid="1657540092086" x21mod8021mod8

It can be written as,

localid="1657540469266" 01mod80mod8=101

Thus, 021mod8.

Similarly,

Substitute the value of x as 1 in the equation,

x21mod8121mod8

It can be written as,

11mod81mod8=11=1

Thus 12=1mod8, 1=1mod8.

Substitute the value of x as 2 in the equation,

x21mod8221mod8

It can be written as,

41mod84mod8=14141mod84mod8=141

Thus, 221mod8.

Substitute the value of x as 3 in the equation,

x21mod8321mod8

It can be written as,

91mod89mod8=11=1

Thus, 32=1mod8.

Substitute the value of x as 4 in the equation,

x21mod8421mod8

It can be written as,

161mod816mod8=1161

Thus, 421mod8.

Substitute the value of x as 5 in the equation,

x21mod8521mod8

It can be written as,

251mod825mod8=11=1

Thus, 52=1mod8.

Substitute the value of x as 6 in the equation,

x21mod8621mod8

It can be written as,

361mod836mod8=1361

Thus, 621mod8.

Substitute the value x as 7 of in the equation,

x21mod8721mod8

It can be written as,

491mod849mod8=11=1

Thus, 72=1mod8.

Therefore,x21mod8 has more than one solution1,3,5,7 for the set of values from 0,1,2,3,4,5,6,7.

Unlock Step-by-Step Solutions & Ace Your Exams!

  • Full Textbook Solutions

    Get detailed explanations and key concepts

  • Unlimited Al creation

    Al flashcards, explanations, exams and more...

  • Ads-free access

    To over 500 millions flashcards

  • Money-back guarantee

    We refund you if you fail your exam.

Over 30 million students worldwide already upgrade their learning with Vaia!

One App. One Place for Learning.

All the tools & learning materials you need for study success - in one app.

Get started for free

Most popular questions from this chapter

RSA and digital signatures. Recall that in the RSA public-key cryptosystem, each user has a public key P=(N,e) and a secret key d. In a digital signature scheme, there are two algorithms, sign and verify. The sign procedure takes a message and a secret key, then outputs a signature σ. The verify procedure takes a public key (N,e), a signature σ, and a message M, then returns “true” if σcould have been created by sign (when called with message M and the secret key (N, e) corresponding to the public key ); “false” otherwise.

(a)Why would we want digital signatures?

(b) An RSA signature consists of sign, (M,d)=Md(modN)where d is a secret key and N is part of the public key . Show that anyone who knows the public key (N,e)can perform verify ((N,e),Md,M), i.e., they can check that a signature really was created by the private key. Give an implementation and prove its correctness.

(c) Generate your own RSA modulus, N=pq public key e, and private key d (you don’t need to use a computer). Pick p and q so you have a 4-digit modulus and work by hand. Now sign your name using the private exponent of this RSA modulus. To do this you will need to specify some one-to-one mapping from strings to integers in [0,N-1]. Specify any mapping you like. Give the mapping from your name to numbers m1,m2,...mk,then sign the first number by giving the value md1(modN), and finally show that .

(md1)e=m1(modN)

(d) Alice wants to write a message that looks like it was digitally signed by Bob. She notices that Bob’s public RSA key is (17,391). To what exponent should she raise her message?

If p is prime, how many elements of{0,1,...pn-1} have an inverse modulopn ?

What is 222006(mod3)?

Show that if ab(modN)and if M Divides Nthenab(modM)

Unlike a decreasing geometric series, the sum of the1,12,13,14,15,..... diverges; that is,i=1n1i=

It turns out that, for large n , the sum of the first n terms of this series can be well approximated as

i=1n1iInn+y

where is natural logarithm (log base e=2.718...) and y is a particular constant 0.57721...... Show that

i=1n1i=θ(logn)

(Hint: To show an upper bound, decrease each denominator to the next power of two. For a lower bound, increase each denominator to the next power of 2 .)

See all solutions

Recommended explanations on Computer Science Textbooks

View all explanations

What do you think about this solution?

We value your feedback to improve our textbook solutions.

Study anywhere. Anytime. Across all devices.

Sign-up for free