Watson Ladd on Sun, 28 Sep 2025 17:18:03 +0200


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [OT] On factoring integers of the form n=(x^D+1)(y^D+1) and n=(x^D+a_(D-2)x^(D-2)+...a_{D-2}(x^{D-2}))(y^D+b_{D-2}(y^{D-2}+...b_0)) with x,y of the same size


You may be interested in Coppersmith's method with application to RSA. While not identical some of the ideas apply.

In particular we can think of x and y the same size as x and v, where y=x+v and v is small. Then knowing that x must be close to a given real number we end up hunting for u,v small that solve a certain polynomial over the integers.


---
Astra mortemque praestare gradatim

On Sun, Sep 28, 2025, 7:18 AM Georgi Guninski <gguninski@gmail.com> wrote:
Many thanks for the feedback!

I am looking for coauthors for a generalization of this algorithm.

Regarding your answer:

>n^(1/D) - (x*y) = a_{D-2}*y/x/D + b_{D-2}*x/y/D +...
>so as long as x/y~1 and C small this should work but I do not expect your

The algorithm works for x/y>20.

> but I do not expect your algorithm to work if x ~ sqrt(y), for example

This is explained in the paper, x,y must of the same size,
something like |log(x)-log(y)|<4.
The current implementation fails for x ~ sqrt(y) in general.