-- Practice Final May 16 2022
Likhitha Yelamanchili, Lakshmi Prasanna Gorrepati
Problem 4
-------------------------------------------------------------
The encryption of RSA gives M ^ ed ≡ M mod p -> 1
similary in the decryption step we get
M ^ ed ≡ M mod q -> 2
Because n = pq, In the correctness of RSA algorithm we use chinese remainder theorem
to prove that using 1 and 2 we could generate
M ^ ed ≡ M(modn)
While proving the correctness of Rabin Miller algorithm,Z*n is not cyclic for a carmichael case and we know that n is an odd number that means the cases 2, 4, 2*p^e are all ruled out.
Case 1: notice n can't be a prime power. To see this suppose n=p^e. Since n is odd, p must also be odd, so Z⋆n will be cyclic, so has a generator g and by assumption we have g^(n−1)≡1modn. On the other hand, ord(g)=φ(n)=(p−1)p^(e−1) and the discrete logarithm theorem implies n−1≡0modφ(n). I. e., (p−1)p^(e−1)∣∣p^e−1, which is impossible as the left hand-side is divisible by p, but the right hand side is not.
Case 2:So suppose n is odd, not a prime power and composite. We can then decompose it as n=n1⋅n2 where n1 and n2 have different prime factors.
In case 1 where n is odd and to show that n can't be a prime power we are making use of the given theorem.
(
Edited: 2022-05-16)
Likhitha Yelamanchili, Lakshmi Prasanna Gorrepati
Problem 4
-----------------------------------------------------------------
The encryption of RSA gives M ^ ed ≡ M mod p -> 1
similary in the decryption step we get
M ^ ed ≡ M mod q -> 2
Because n = pq, In the correctness of RSA algorithm we use chinese remainder theorem
to prove that using 1 and 2 we could generate
M ^ ed ≡ M(modn)
While proving the correctness of Rabin Miller algorithm,Z*n is not cyclic for a carmichael case and we know that n is an odd number that means the cases 2, 4, 2*p^e are all ruled out.
Case 1: notice n can't be a prime power. To see this suppose n=p^e. Since n is odd, p must also be odd, so Z⋆n will be cyclic, so has a generator g and by assumption we have g^(n−1)≡1modn. On the other hand, ord(g)=φ(n)=(p−1)p^(e−1) and the discrete logarithm theorem implies n−1≡0modφ(n). I. e., (p−1)p^(e−1)∣∣p^e−1, which is impossible as the left hand-side is divisible by p, but the right hand side is not.
Case 2:So suppose n is odd, not a prime power and composite. We can then decompose it as n=n1⋅n2 where n1 and n2 have different prime factors.
In case 1 where n is odd and to show that n can't be a prime power we are making use of the given theorem.