Paper 2016/684

Faster individual discrete logarithms in finite fields of composite extension degree

Aurore Guillevic


Computing discrete logarithms in finite fields is a main concern in cryptography. The best algorithms in large and medium characteristic fields (e.g., {GF}$(p^2)$, {GF}$(p^{12})$) are the Number Field Sieve and its variants (special, high-degree, tower). The best algorithms in small characteristic finite fields (e.g., {GF}$(3^{6 \cdot 509})$) are the Function Field Sieve, Joux's algorithm, and the quasipolynomial-time algorithm. The last step of this family of algorithms is the individual logarithm computation. It computes a smooth decomposition of a given target in two phases: an initial splitting, then a descent tree. While new improvements have been made to reduce the complexity of the dominating relation collection and linear algebra steps, resulting in a smaller factor basis (database of known logarithms of small elements), the last step remains at the same level of difficulty. Indeed, we have to find a smooth decomposition of a typically large element in the finite field. This work improves the initial splitting phase and applies to any nonprime finite field. It is very efficient when the extension degree is composite. It exploits the proper subfields, resulting in a much more smooth decomposition of the target. This leads to a new trade-off between the initial splitting step and the descent step in small characteristic. Moreover it reduces the width and the height of the subsequent descent tree.

Note: Copyright.

Available format(s)
Publication info
Published elsewhere. Mathematics of Computation, AMS
finite fielddiscrete logarithmnumber field sievefunction field sieve
Contact author(s)
aurore guillevic @ inria fr
2018-09-17: last of 3 revisions
2016-07-12: received
See all versions
Short URL
Creative Commons Attribution


      author = {Aurore Guillevic},
      title = {Faster individual discrete logarithms in finite fields of composite extension degree},
      howpublished = {Cryptology ePrint Archive, Paper 2016/684},
      year = {2016},
      doi = {10.1090/mcom/3376},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.