Let S be a finite set. Given a function f : S → S and an element a ∈ S, define f(a) = a and f (a) = f(f i−1(a)) for all i ≥ 1. Let s ≥ 0 and r > 0 be the smallest integers such that f(a) = f(a). Determining s and r, given a ∈ S and a black-box oracle to f , is the cycle-detection problem. When f is bijective (i.e., f is a permutation of S), the order-finding problem is to find the smallest r > 0 such that f(a) = a, and the discrete-log problem is, given an additional element b ∈ S, to find the smallest k ≥ 0 such that f(a) = b. We study the query complexity of these problems with oracles that allow “jumps” to distant positions in the sequence ā , f(a)f(a)f(a) · · · ∈ S∗ at unit cost. Specifically, for every m ∈ N the oracle O f is defined, which for every a ∈ S allows to look ahead at any position i < m in the sequence ā; that is, O f (a, i) = f (a) for every (a, i) ∈ S × [m]. We show that with an unrestricted oracle O∞ f , the cycle-detection and order-finding problems can be solved using O(log s+log r/ log log log r) and O(log r/ log log log r) queries, respectively, regardless of |S|. This is nearly optimal, as we also prove lower bounds of Ω(log s + log r/ log log r) and Ω(log r/ log log r) queries. Interestingly, for the discrete-log problem, our results combined with the algorithm of Sutherland [8] imply a lower bound of Ω( √ r/ log r) queries (where r is the size of the cycle to which both a and b belong), which is tight up to the log r factor. This contrasts with the fact that, with generic group-operation oracles, the problems of order finding and discrete log are known to have polynomially related query complexities. We also provide algorithms and lower bounds for general oracles O f , m ∈ N, improving results from earlier work. In particular, with m = poly(r), our lower bound for order-finding improves the previous bound of Ω(r) queries, proved by Cleve [2], to Ω(r), which is nearly optimal.
[1]
L. Babai,et al.
Groups St Andrews 1997 in Bath, I: A polynomial-time theory of black box groups I
,
1999
.
[2]
E. T. Bell.
Review: G. H. Hardy and E. M. Wright, An Introduction to the Theory of Numbers
,
1939
.
[3]
Robert W. Floyd,et al.
Nondeterministic Algorithms
,
1967,
JACM.
[4]
D. Shanks.
Class number, a theory of factorization, and genera
,
1971
.
[5]
Andrew V. Sutherland.
Order computations in generic groups
,
2007
.
[6]
E. T..
An Introduction to the Theory of Numbers
,
1946,
Nature.
[7]
Victor Shoup,et al.
Lower Bounds for Discrete Logarithms and Related Problems
,
1997,
EUROCRYPT.
[8]
Richard Cleve,et al.
The query complexity of order-finding
,
1999,
Proceedings 15th Annual IEEE Conference on Computational Complexity.
[9]
Ilan Newman,et al.
Testing Periodicity
,
2009,
Algorithmica.