+ 1= x + 1. These 4 elements form a field.

Similar documents
THE ARITHMETIC OF INTEGERS. - multiplication, exponentiation, division, addition, and subtraction

1. MATHEMATICAL INDUCTION

Soving Recurrence Relations

CS103A Handout 23 Winter 2002 February 22, 2002 Solving Recurrence Relations

2-3 The Remainder and Factor Theorems

Here are a couple of warnings to my students who may be here to get a copy of what happened on a day that you missed.

. P. 4.3 Basic feasible solutions and vertices of polyhedra. x 1. x 2

WHEN IS THE (CO)SINE OF A RATIONAL ANGLE EQUAL TO A RATIONAL NUMBER?

Confidence Intervals for One Mean

Sequences and Series

Trigonometric Form of a Complex Number. The Complex Plane. axis. ( 2, 1) or 2 i FIGURE The absolute value of the complex number z a bi is

Solving equations. Pre-test. Warm-up

In nite Sequences. Dr. Philippe B. Laval Kennesaw State University. October 9, 2008

Factoring x n 1: cyclotomic and Aurifeuillian polynomials Paul Garrett <garrett@math.umn.edu>

Repeating Decimals are decimal numbers that have number(s) after the decimal point that repeat in a pattern.

Chapter 5: Inner Product Spaces

CS103X: Discrete Structures Homework 4 Solutions

Factors of sums of powers of binomial coefficients

Department of Computer Science, University of Otago

How To Solve The Homewor Problem Beautifully

Fast Fourier Transform

How to use what you OWN to reduce what you OWE

Example 2 Find the square root of 0. The only square root of 0 is 0 (since 0 is not positive or negative, so those choices don t exist here).

Math 114- Intermediate Algebra Integral Exponents & Fractional Exponents (10 )

A probabilistic proof of a binomial identity

.04. This means $1000 is multiplied by 1.02 five times, once for each of the remaining sixmonth

Properties of MLE: consistency, asymptotic normality. Fisher information.

CHAPTER 11 Financial mathematics

Notes on exponential generating functions and structures.

Asymptotic Growth of Functions


Your organization has a Class B IP address of Before you implement subnetting, the Network ID and Host ID are divided as follows:

CHAPTER 7: Central Limit Theorem: CLT for Averages (Means)

2 MATH 101B: ALGEBRA II, PART D: REPRESENTATIONS OF GROUPS

Irreducible polynomials with consecutive zero coefficients

Week 3 Conditional probabilities, Bayes formula, WEEK 3 page 1 Expected value of a random variable

7.1 Finding Rational Solutions of Polynomial Equations

A Note on Sums of Greatest (Least) Prime Factors

Mathematical goals. Starting points. Materials required. Time needed

Section 11.3: The Integral Test

THE REGRESSION MODEL IN MATRIX FORM. For simple linear regression, meaning one predictor, the model is. for i = 1, 2, 3,, n

Basic Elements of Arithmetic Sequences and Series

3. Greatest Common Divisor - Least Common Multiple

5.3. Generalized Permutations and Combinations

1 Correlation and Regression Analysis

SEQUENCES AND SERIES

FIBONACCI NUMBERS: AN APPLICATION OF LINEAR ALGEBRA. 1. Powers of a matrix

S. Tanny MAT 344 Spring be the minimum number of moves required.

How To Understand The Theory Of Coectedess

Multiple Representations for Pattern Exploration with the Graphing Calculator and Manipulatives

Maximum Likelihood Estimators.

Convexity, Inequalities, and Norms

Chapter 7 - Sampling Distributions. 1 Introduction. What is statistics? It consist of three major areas:

CS100: Introduction to Computer Science

CME 302: NUMERICAL LINEAR ALGEBRA FALL 2005/06 LECTURE 8

Solving Logarithms and Exponential Equations

CHAPTER 4: NET PRESENT VALUE

*The most important feature of MRP as compared with ordinary inventory control analysis is its time phasing feature.

Cooley-Tukey. Tukey FFT Algorithms. FFT Algorithms. Cooley

GCE Further Mathematics (6360) Further Pure Unit 2 (MFP2) Textbook. Version: 1.4

Lecture 7: Stationary Perturbation Theory

Modified Line Search Method for Global Optimization

Discrete Mathematics and Probability Theory Spring 2014 Anant Sahai Note 13

Lesson 17 Pearson s Correlation Coefficient

The Stable Marriage Problem

Chapter 7 Methods of Finding Estimators

Building Blocks Problem Related to Harmonic Series

Overview on S-Box Design Principles

Part - I. Mathematics

FOUNDATIONS OF MATHEMATICS AND PRE-CALCULUS GRADE 10

CHAPTER 3 DIGITAL CODING OF SIGNALS

Listing terms of a finite sequence List all of the terms of each finite sequence. a) a n n 2 for 1 n 5 1 b) a n for 1 n 4 n 2

3 Basic Definitions of Probability Theory

Lecture 4: Cauchy sequences, Bolzano-Weierstrass, and the Squeeze theorem

An Introduction to Logistics and the Supply Chain. An Introduction To Logistics And The Supply Chain

, a Wishart distribution with n -1 degrees of freedom and scale matrix.

SECTION 1.5 : SUMMATION NOTATION + WORK WITH SEQUENCES

Chapter System of Equations

Perfect Packing Theorems and the Average-Case Behavior of Optimal and Online Bin Packing

The Role of Latin Square in Cipher Systems: A Matrix Approach to Model Encryption Modes of Operation

Determining the sample size

I. Why is there a time value to money (TVM)?

The Binomial Multi- Section Transformer

Handling. Collection Calls

MARTINGALES AND A BASIC APPLICATION

Lecture 5: Span, linear independence, bases, and dimension

Routine for 8-Bit Binary to BCD Conversion

where: T = number of years of cash flow in investment's life n = the year in which the cash flow X n i = IRR = the internal rate of return

LECTURE 13: Cross-validation

Theorems About Power Series

Overview. Learning Objectives. Point Estimate. Estimation. Estimating the Value of a Parameter Using Confidence Intervals

5: Introduction to Estimation

Our aim is to show that under reasonable assumptions a given 2π-periodic function f can be represented as convergent series

Research Method (I) --Knowledge on Sampling (Simple Random Sampling)

5 Boolean Decision Trees (February 11)

BINOMIAL EXPANSIONS In this section. Some Examples. Obtaining the Coefficients

Annuities Under Random Rates of Interest II By Abraham Zaks. Technion I.I.T. Haifa ISRAEL and Haifa University Haifa ISRAEL.

Lesson 15 ANOVA (analysis of variance)

Complex Numbers. where x represents a root of Equation 1. Note that the ± sign tells us that quadratic equations will have

Elementary Theory of Russian Roulette

Transcription:

Itroductio to fiite fields II Fiite field of p elemets F Because we are iterested i doig computer thigs it would be useful for us to costruct fields havig elemets. Let s costruct a field of elemets; we will mimic the costructio of the itegers mod a prime p. We begi with the polyomials havig coefficiets from F ; i.e., each of the coefficiets of our polyomials is either 0 or 1. Select a polyomial of degree that is irreducible over F (i.e., it does ot factor ito polyomials of smaller degree havig coefficiets 0 ad 1). This irreducible polyomial correspods to the prime p. There are irreducibility tests for polyomials just as there are primality tests for itegers. For example, + + 1 is irreducible over F. By polyomial log divisio, divide each polyomial havig coefficiets 0 ad 1 by + + 1 ad take the remaider. What does the remaider look like? After divisio, the remaider is of degree less tha ; so, the remaider will look like x + where each coefficiet is either 0 or 1. So, there are possible remaiders: 0x + 0= 0, 0x + 1= 1, 1x + 0= x, ad 1x + 1= x + 1. These elemets form a field. Sometimes polyomials model real world situatios, ad is treated as a ukow for which we wat to solve. We wat to look at polyomials i a slightly differet way ow more of a abstract algebra way. We do ot care about solvig for the value of, we oly care about the polyomial itself. Thikig this way, a polyomial is determied by its coefficiets; the powers of are just used to separate the coefficiets. We could just as well thik of a polyomial as a vector where the compoets are the coefficiets; e.g., the four remaiders that we obtaied above could be writte as (0, 0), (0, 1), (1, 0), ad (1, 1). We will use these vectors as the elemets of our field of elemets rather tha the correspodig polyomials (but we will have to remember from time to time that they really are polyomials to make sese of multiplicatio). We could carry this oe more step. We are used to work with strigs of bits; so, we might replace the polyomials ad their correspodig vectors by the -bit strigs 00, 01, 10, 11.

So, we have the followig correspodeces: polyomial vector bit strig + 0 (0, 0) 00 + 1 (0, 1) 01 1 + 0 (1, 0) 10 1 + 1 (1, 1) 11 We will be thikig about bit strigs. We have always bee able to add (OR) strigs of bits, but we wat to come up with a way to multiply strigs of bits. The we ca apply some of the mathematical ideas that we used with the classical ciphers to strigs of bits. Additio of vectors To add (1, 0) ad (1, 1), we ca thik of addig the correspodig polyomials mod : + 0 + 1 + 1 Thikig of vectors, we just add the vectors mod : (1, 0) (1, 1) (0, 1) Or, i terms of -bit strigs: 10 11 01 which just correspods to ORig bits.

Here is the additio table for our field of elemets: + (0, 0) (0, 1) (1, 0) (1, 1) (0, 0) (0, 0) (0, 1) (1, 0) (1, 1) (0, 1) (0, 1) (0, 0) (1, 1) (1, 0) (1, 0) (1, 0) (1, 1) (0, 0) (0, 1) (1, 1) (1, 1) (1, 0) (0, 1) (0, 0) Multiplicatio of vectors To multiply, we must recall the polyomial origis of our operatios. To multiply ( 1, 0) (1, 1), we must multiply ( 1) + = + ad the go mod + + 1. By polyomial log divisio mod, we obtai ( ) + = 1 + + 1 + 1 Mod + + 1, this becomes (the remaider) 1. So, (1, 0) (1, 1) = (0, 1). Here is the multiplicatio table for our field of elemets. (0, 1) (1, 0) (1, 1) (0, 1) (0, 1) (1, 0) (1, 1) (1, 0) (1, 0) (1, 1) (0, 1) (1, 1) (1, 1) (0, 1) (1, 0)

F 8 3 To costruct a field of 8= elemets, we would eed to mod out by a irreducible polyomial of degree 3; the remaiders would look like + + where each coefficiet is either 0 or 1. To costruct a field of 16 = elemets, we would eed to mod out by a irreducible 3 polyomial of degree ; the remaiders would look like + + +. To costruct a field of bytes, we would eed to mod out by a irreducible polyomial of degree 8. Let s costruct a field of 8 elemets. We will use the polyomial + + 1, which is irreducible over. 3 3 The remaiders after divisio by 1 ax + bx + c : a, b, c F ; i.e., the remaiders look like 3-dimesioal vectors where each compoet is 0 or 1. Or, we could thik of the remaiders as beig 3-bit strigs. Additio is ORig bits. F + + look like { } Additio (0, 0, 0) (0, 0,1) (0,1, 0) (1, 0, 0) (1, 0,1) (1,1,1) (0,1,1) (1,1, 0) (0,0,0) (0,0,0) (0,0,1) (0,1,0) (1,0,0) (1,0,1) (1,1,1) (0,1,1) (1,1,0) (0, 0,1) (0, 0,1) (0, 0, 0) (0,1,1) (1, 0,1) (1, 0, 0) (1,1, 0) (0,1, 0) (1,1,1) (0,1, 0) (0,1, 0) (0,1,1) (0, 0, 0) (1,1, 0) (1,1,1) (1, 0,1) (0, 0,1) (1, 0, 0) (1, 0, 0) (1, 0, 0) (1, 0,1) (1,1, 0) (0, 0, 0) (0, 0,1) (0,1,1) (1,1,1) (0,1, 0) (1,0,1) (1,0,1) (1,0,0) (1,1,1) (0,0,1) (0,0,0) (0,1,0) (1,1,0) (0,1,1) (1,1,1) (1,1,1) (1,1,0) (1,0,1) (0,1,1) (0,1,0) (0,0,0) (1,0,0) (0,0,1) (0,1,1) (0,1,1) (0,1,0) (0,0,1) (1,1,1) (1,1,0) (1,0,0) (0,0,0) (1,0,1) (1,1,0) (1,1,0) (1,1,1) (1,0,0) (0,1,0) (0,1,1) (0,0,1) (1,0,1) (0,0,0)

Multiplicatio is polyomial multiplicatio modulo + + 1. 3 Multiplicatio (0,0,1) (0,1,0) (1,0,0) (1,0,1) (1,1,1) (0,1,1) (1,1,0) (0,0,1) (0,0,1) (0,1,0) (1,0,0) (1,0,1) (1,1,1) (0,1,1) (1,1,0) (0,1,0) (0,1,0) (1,0,0) (1,0,1) (1,1,1) (0,1,1) (1,1,0) (0,0,1) (1, 0, 0) (1, 0, 0) (1, 0,1) (1,1,1) (0,1,1) (1,1, 0) (0, 0,1) (0,1, 0) (1,0,1) (1,0,1) (1,1,1) (0,1,1) (1,1,0) (0,0,1) (0,1,0) (1,0,0) (1,1,1) (1,1,1) (0,1,1) (1,1,0) (0,0,1) (0,1,0) (1,0,0) (1,0,1) (0,1,1) (0,1,1) (1,1,0) (0,0,1) (0,1,0) (1,0,0) (1,0,1) (1,1,1) (1,1,0) (1,1,0) (0,0,1) (0,1,0) (1,0,0) (1,0,1) (1,1,1) (0,1,1) F 16 The simplified AES we cosidered uses a field of 16 elemets obtaied by goig modulo the irreducible polyomial + + 1. For example, (1, 0, 1, 1) + (0, 1, 1, 0) = (1, 1, 0, 1) ad (1, 0, 1, 1) (1, 1, 0, 1) = (0, 1, 1, 0) Although E.H. Moore proved that for each p, p prime, there is a uique fiite field of p elemets, the uiqueess is up to isomorphism a algebraic term. Additio is the same for all fiite fields of p elemets; it is just additio modulo p. But, multiplicatio of two elemets of the field depeds o the irreducible polyomial that is used as the modulus.