2008-06-25 03:33:36 -04:00
|
|
|
/* mpz_jacobi, mpz_legendre, mpz_kronecker -- mpz/mpz Jacobi symbols.
|
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
Copyright 2000, 2001, 2002, 2005, 2010, 2011, 2012 Free Software Foundation,
|
|
|
|
Inc.
|
2008-06-25 03:33:36 -04:00
|
|
|
|
|
|
|
This file is part of the GNU MP Library.
|
|
|
|
|
|
|
|
The GNU MP Library is free software; you can redistribute it and/or modify it
|
|
|
|
under the terms of the GNU Lesser General Public License as published by the
|
2014-02-28 08:59:52 -05:00
|
|
|
Free Software Foundation; either version 3 of the License, or (at your
|
2008-06-25 03:33:36 -04:00
|
|
|
option) any later version.
|
|
|
|
|
|
|
|
The GNU MP Library is distributed in the hope that it will be useful, but
|
|
|
|
WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
|
|
FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License
|
|
|
|
for more details.
|
|
|
|
|
|
|
|
You should have received a copy of the GNU Lesser General Public License along
|
2014-02-28 08:59:52 -05:00
|
|
|
with the GNU MP Library. If not, see http://www.gnu.org/licenses/. */
|
2008-06-25 03:33:36 -04:00
|
|
|
|
|
|
|
#include <stdio.h>
|
2009-02-12 05:24:24 -05:00
|
|
|
#include "mpir.h"
|
2008-06-25 03:33:36 -04:00
|
|
|
#include "gmp-impl.h"
|
|
|
|
#include "longlong.h"
|
|
|
|
|
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
/* This code does triple duty as mpz_jacobi, mpz_legendre and
|
|
|
|
mpz_kronecker. For ABI compatibility, the link symbol is
|
|
|
|
__gmpz_jacobi, not __gmpz_kronecker, even though the latter would
|
|
|
|
be more logical.
|
2008-06-25 03:33:36 -04:00
|
|
|
|
|
|
|
mpz_jacobi could assume b is odd, but the improvements from that seem
|
|
|
|
small compared to other operations, and anything significant should be
|
|
|
|
checked at run-time since we'd like odd b to go fast in mpz_kronecker
|
|
|
|
too.
|
|
|
|
|
|
|
|
mpz_legendre could assume b is an odd prime, but knowing this doesn't
|
|
|
|
present any obvious benefits. Result 0 wouldn't arise (unless "a" is a
|
|
|
|
multiple of b), but the checking for that takes little time compared to
|
|
|
|
other operations.
|
|
|
|
|
|
|
|
Enhancements:
|
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
mpn_bdiv_qr should be used instead of mpn_tdiv_qr.
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
*/
|
2008-06-25 03:33:36 -04:00
|
|
|
|
|
|
|
int
|
|
|
|
mpz_jacobi (mpz_srcptr a, mpz_srcptr b)
|
|
|
|
{
|
|
|
|
mp_srcptr asrcp, bsrcp;
|
|
|
|
mp_size_t asize, bsize;
|
2014-02-28 08:59:52 -05:00
|
|
|
mp_limb_t alow, blow;
|
2008-06-25 03:33:36 -04:00
|
|
|
mp_ptr ap, bp;
|
2014-02-28 08:59:52 -05:00
|
|
|
unsigned btwos;
|
2008-06-25 03:33:36 -04:00
|
|
|
int result_bit1;
|
2014-02-28 08:59:52 -05:00
|
|
|
int res;
|
2008-06-25 03:33:36 -04:00
|
|
|
TMP_DECL;
|
|
|
|
|
|
|
|
asize = SIZ(a);
|
|
|
|
asrcp = PTR(a);
|
|
|
|
alow = asrcp[0];
|
|
|
|
|
|
|
|
bsize = SIZ(b);
|
|
|
|
bsrcp = PTR(b);
|
|
|
|
blow = bsrcp[0];
|
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
/* The MPN jacobi functions require positive a and b, and b odd. So
|
|
|
|
we must to handle the cases of a or b zero, then signs, and then
|
|
|
|
the case of even b.
|
|
|
|
*/
|
|
|
|
|
|
|
|
if (bsize == 0)
|
|
|
|
/* (a/0) = [ a = 1 or a = -1 ] */
|
|
|
|
return JACOBI_LS0 (alow, asize);
|
|
|
|
|
2008-06-25 03:33:36 -04:00
|
|
|
if (asize == 0)
|
2014-02-28 08:59:52 -05:00
|
|
|
/* (0/b) = [ b = 1 or b = - 1 ] */
|
|
|
|
return JACOBI_0LS (blow, bsize);
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
if ( (((alow | blow) & 1) == 0))
|
|
|
|
/* Common factor of 2 ==> (a/b) = 0 */
|
2008-06-25 03:33:36 -04:00
|
|
|
return 0;
|
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
if (bsize < 0)
|
|
|
|
{
|
|
|
|
/* (a/-1) = -1 if a < 0, +1 if a >= 0 */
|
|
|
|
result_bit1 = (asize < 0) << 1;
|
|
|
|
bsize = -bsize;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
result_bit1 = 0;
|
2008-06-25 03:33:36 -04:00
|
|
|
|
|
|
|
JACOBI_STRIP_LOW_ZEROS (result_bit1, alow, bsrcp, bsize, blow);
|
|
|
|
|
|
|
|
count_trailing_zeros (btwos, blow);
|
|
|
|
blow >>= btwos;
|
2014-02-28 08:59:52 -05:00
|
|
|
|
|
|
|
if (bsize > 1 && btwos > 0)
|
2008-06-25 03:33:36 -04:00
|
|
|
{
|
2014-02-28 08:59:52 -05:00
|
|
|
mp_limb_t b1 = bsrcp[1];
|
|
|
|
blow |= b1 << (GMP_NUMB_BITS - btwos);
|
|
|
|
if (bsize == 2 && (b1 >> btwos) == 0)
|
|
|
|
bsize = 1;
|
2008-06-25 03:33:36 -04:00
|
|
|
}
|
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
if (asize < 0)
|
2008-06-25 03:33:36 -04:00
|
|
|
{
|
2014-02-28 08:59:52 -05:00
|
|
|
/* (-1/b) = -1 iff b = 3 (mod 4) */
|
|
|
|
result_bit1 ^= JACOBI_N1B_BIT1(blow);
|
|
|
|
asize = -asize;
|
2008-06-25 03:33:36 -04:00
|
|
|
}
|
|
|
|
|
|
|
|
JACOBI_STRIP_LOW_ZEROS (result_bit1, blow, asrcp, asize, alow);
|
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
/* Ensure asize >= bsize. Take advantage of the generalized
|
|
|
|
reciprocity law (a/b*2^n) = (b*2^n / a) * RECIP(a,b) */
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
if (asize < bsize)
|
2008-06-25 03:33:36 -04:00
|
|
|
{
|
2014-02-28 08:59:52 -05:00
|
|
|
MPN_SRCPTR_SWAP (asrcp, asize, bsrcp, bsize);
|
|
|
|
MP_LIMB_T_SWAP (alow, blow);
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
/* NOTE: The value of alow (old blow) is a bit subtle. For this code
|
|
|
|
path, we get alow as the low, always odd, limb of shifted A. Which is
|
|
|
|
what we need for the reciprocity update below.
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
However, all other uses of alow assumes that it is *not*
|
|
|
|
shifted. Luckily, alow matters only when either
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
+ btwos > 0, in which case A is always odd
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
+ asize == bsize == 1, in which case this code path is never
|
|
|
|
taken. */
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
count_trailing_zeros (btwos, blow);
|
|
|
|
blow >>= btwos;
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
if (bsize > 1 && btwos > 0)
|
|
|
|
{
|
|
|
|
mp_limb_t b1 = bsrcp[1];
|
|
|
|
blow |= b1 << (GMP_NUMB_BITS - btwos);
|
|
|
|
if (bsize == 2 && (b1 >> btwos) == 0)
|
|
|
|
bsize = 1;
|
|
|
|
}
|
2008-06-25 03:33:36 -04:00
|
|
|
|
|
|
|
result_bit1 ^= JACOBI_RECIP_UU_BIT1 (alow, blow);
|
|
|
|
}
|
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
if (bsize == 1)
|
2008-06-25 03:33:36 -04:00
|
|
|
{
|
2014-02-28 08:59:52 -05:00
|
|
|
result_bit1 ^= JACOBI_TWOS_U_BIT1(btwos, alow);
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
if (blow == 1)
|
|
|
|
return JACOBI_BIT1_TO_PN (result_bit1);
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
if (asize > 1)
|
|
|
|
JACOBI_MOD_OR_MODEXACT_1_ODD (result_bit1, alow, asrcp, asize, blow);
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
return mpn_jacobi_base (alow, blow, result_bit1);
|
|
|
|
}
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
/* Allocation strategy: For A, we allocate a working copy only for A % B, but
|
|
|
|
when A is much larger than B, we have to allocate space for the large
|
|
|
|
quotient. We use the same area, pointed to by bp, for both the quotient
|
|
|
|
A/B and the working copy of B. */
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
TMP_MARK;
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
if (asize >= 2*bsize)
|
|
|
|
TMP_ALLOC_LIMBS_2 (ap, bsize, bp, asize - bsize + 1);
|
|
|
|
else
|
|
|
|
TMP_ALLOC_LIMBS_2 (ap, bsize, bp, bsize);
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
/* In the case of even B, we conceptually shift out the powers of two first,
|
|
|
|
and then divide A mod B. Hence, when taking those powers of two into
|
|
|
|
account, we must use alow *before* the division. Doing the actual division
|
|
|
|
first is ok, because the point is to remove multiples of B from A, and
|
|
|
|
multiples of 2^k B are good enough. */
|
|
|
|
if (asize > bsize)
|
|
|
|
mpn_tdiv_qr (bp, ap, 0, asrcp, asize, bsrcp, bsize);
|
|
|
|
else
|
|
|
|
MPN_COPY (ap, asrcp, bsize);
|
|
|
|
|
|
|
|
if (btwos > 0)
|
|
|
|
{
|
|
|
|
result_bit1 ^= JACOBI_TWOS_U_BIT1(btwos, alow);
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
ASSERT_NOCARRY (mpn_rshift (bp, bsrcp, bsize, btwos));
|
|
|
|
bsize -= (ap[bsize-1] | bp[bsize-1]) == 0;
|
|
|
|
}
|
|
|
|
else
|
|
|
|
MPN_COPY (bp, bsrcp, bsize);
|
2008-06-25 03:33:36 -04:00
|
|
|
|
2014-02-28 08:59:52 -05:00
|
|
|
ASSERT (blow == bp[0]);
|
|
|
|
res = mpn_jacobi_n (ap, bp, bsize,
|
|
|
|
mpn_jacobi_init (ap[0], blow, (result_bit1>>1) & 1));
|
2008-06-25 03:33:36 -04:00
|
|
|
|
|
|
|
TMP_FREE;
|
2014-02-28 08:59:52 -05:00
|
|
|
return res;
|
2008-06-25 03:33:36 -04:00
|
|
|
}
|