English

An efficient deterministic test for Kloosterman sum zeros

Number Theory 2012-04-24 v2 Cryptography and Security

Abstract

We propose a simple deterministic test for deciding whether or not an element a\F2n×a \in \F_{2^n}^{\times} or \F3n×\F_{3^n}^{\times} is a zero of the corresponding Kloosterman sum over these fields, and rigorously analyse its runtime. The test seems to have been overlooked in the literature. The expected cost of the test for binary fields is a single point-halving on an associated elliptic curve, while for ternary fields the expected cost is one half of a point-thirding on an associated elliptic curve. For binary fields of practical interest, this represents an O(n) speedup over the previous fastest test. By repeatedly invoking the test on random elements of \F2n×\F_{2^n}^{\times} we obtain the most efficient probabilistic method to date to find non-trivial Kloosterman sum zeros. The analysis depends on the distribution of Sylow pp-subgroups in the two families of associated elliptic curves, which we ascertain using a theorem due to Howe.

Cite

@article{arxiv.1104.3882,
  title  = {An efficient deterministic test for Kloosterman sum zeros},
  author = {Omran Ahmadi and Robert Granger},
  journal= {arXiv preprint arXiv:1104.3882},
  year   = {2012}
}

Comments

17 pages, accepted to Mathematics of Computation. This is the final version with many improvements upon the first version. We also include new records for the computation of Kloosterman zeros

R2 v1 2026-06-21T17:56:27.965Z