On the complexity formulae of the number field sieve and its variants
摘要
The number field sieve (NFS) is the state-of-the-art algorithm for integer factorization and discrete logarithm computation over finite fields of non-small characteristic. Many variants have been proposed to enhance the effectiveness of NFS both theoretically and practically. However, the complexity analyses of these variants are all in ad hoc manners. Whenever a new variant is proposed, the overall complexity needs to be reanalyzed. In this paper, we give the complexity formulae for NFS and its variants. These formulae are not limited to any specific polynomial selection method, and have no restriction on the degree of the polynomials we sieve on or the number of fields we use. Then for a given new variant, there is no necessity to reanalyze the complexity, but only to substitute certain parameters in the complexity formulae directly, and the advantages of the new algorithm at the complexity level can be easily seen. While the previous analyses are based on the multivariate optimization methods, our analysis method is more elementary. By utilizing the formulae, we establish the lower bounds of the complexities of NFS and all its variants, which are proved to be not lower than