Paper 2026/2621

Bounds on polynomial approximations of the discrete logarithm function

Swastik Kopparty, University of Toronto
Rishabh Kothary, University of Toronto
Ashutosh Shankar, Tata Institute of Fundamental Research
Abstract

We revisit a classical result of Coppersmith and Shparlinski [CS00] showing bounds on how well polynomials can approximate the discrete log function. They showed that for any univariate polynomial $f(X) \in \mathbb{F}_p[X]$ with $\deg(f) \leq D$, we have: $$ |\{ x \in \mathbb{F}_p^\times \mid f(x) = \mathsf{dlog}(x) \}| \leq \sqrt{2 D p}.$$ We show two improvements: (1) For all $D$, we improve the upper bound above to $(1+o(1)) \cdot \sqrt{Dp}$. In particular, we give nontrivial upper bounds on the approximation even for $D > p/2$. This new upper bound is the Johnson bound from the theory of list-decoding of error-correcting codes, and in fact our proof uses a connection to that problem, as well as other combinatorial ideas. (2) For $D = 1$, where both the above bounds are $\mathcal{O}(\sqrt{p})$, we give an asymptotically improved upper bound of $\mathcal{O}(p^{2/5})$. This is based on the sum-product phenomenon of additive combinatorics. We also improve the [CS00] bounds on the number of points of the form $(x, \mathsf{dlog}(x)) \in \mathbb{F}_p^2$ that any bivariate polynomial $Q(X,Y) \in \mathbb{F}_p[X,Y]$ with $\deg(Q) \leq D$ can vanish on, with our new bounds approaching the analogue of the Johnson bound for this problem.

Metadata
Available format(s)
PDF
Category
Foundations
Publication info
Preprint.
Keywords
Discrete LogarithmPolynomial ApproximationLine Point Incidence
Contact author(s)
swastik kopparty @ utoronto ca
rishabh kothary @ mail utoronto ca
ashutosh shankar @ tifr res in
History
2026-10-26: approved
2026-10-24: received
See all versions
Short URL
https://ia.cr/2026/2621
License
Creative Commons Attribution-NonCommercial-NoDerivs
CC BY-NC-ND

BibTeX

@misc{cryptoeprint:2026/2621,
      author = {Swastik Kopparty and Rishabh Kothary and Ashutosh Shankar},
      title = {Bounds on polynomial approximations of the discrete logarithm function},
      howpublished = {Cryptology {ePrint} Archive, Paper 2026/2621},
      year = {2026},
      url = {https://eprint.iacr.org/2026/2621}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.