Quadratic Residue Article Index for
Quadratic
Shopping
Quadratic
 

Information About

Quadratic Residue




:{x^2}\equiv{q}\mbox{ (mod }n\mbox{)}.

Otherwise, ''q'' is called a quadratic non-residue.
For example, 3^2 \equiv 2 \mbox{ (mod }7\mbox{)} , and thus 2 is a quadratic residue modulo 7.
In effect, a quadratic residue modulo ''n'' is a number that has a Square Root in Modular Arithmetic when the modulus is ''n''.

For odd prime moduli, roughly half of the residue classes are quadratic residue, and half are quadratic non-residue. More precisely, for a prime ''p'' > 2, there are

: rac{p-1}{2}

of each kind, excluding 0. (Note that for p=2 we have the trivial statement that every number is a quadratic residue since both 0 and 1 are quadratic residues; but in fact the more general statement is true that in finite fields of even characteristic every element is a square.) Quadratic residues occur in a rather random pattern; this has been exploited in applications to Acoustics and Cryptography .
Though it can be very difficult to extract square roots in modular arithmetic for large moduli, Gauss' theorem of Quadratic Reciprocity gives a beautiful and elegant algorithm to compute whether or not a given number is a quadratic residue modulo a prime.


COMPLEXITY OF FINDING SQUARE ROOTS

The problem of finding a square root in modular arithmetic, in other words solving the above for ''x'' given ''q'' and ''n'', can be a difficult problem. For general composite ''n'', the problem is known to be equivalent to Integer Factorization of ''n'' (an efficient solution to either problem could be used to solve the other efficiently). On the other hand, if we want to know if there is a solution for ''x'' less than some given limit ''c'', this problem is NP-complete (Adleman, Manders 1978); however, this is a Fixed-parameter Tractable problem, where ''c'' is the parameter.


QUADRATIC RESIDUES IN CRYPTOGRAPHY

The property that finding a square root of a large composit ''n'' is equivalent to factoring has been used for constructing cryptographic schemes: Rabin Cryptosystem , Oblivious Transfer .

Another property that is often used in cryptography is the following:

If n is a product of odd prime powers and x_1 and x_2 are relatively prime to ''n'' then the product x_1 x_2 is a quadratic residue modulo n, if and only if either both x_1 and x_2 are quadratic residues or both x_1 and x_2 are quadratic non-residues.


SEE ALSO



REFERENCES

  • 1 A7.1: AN1, pg.249.

  • 2



EXTERNAL LINKS