Arrow Research search

Author name cluster

Claus-Peter Schnorr

Possible papers associated with this exact author name in Arrow. This page groups case-insensitive exact name matches and is not a full identity disambiguation profile.

10 papers
1 author row

Possible papers

10

MFCS Conference 2007 Conference Paper

Public Key Identification Based on the Equivalence of Quadratic Forms

  • Rupert J. Hartung
  • Claus-Peter Schnorr

Abstract The computational equivalence problem for quadratic forms is shown to be NP-hard under randomized reductions, in particular for indefinite, ternary quadratic forms with integer coefficients. This result is conditional on a variant of the Cohen-Lenstra heuristics on class numbers. Our identification scheme proves knowledge of an equivalence transform.

FOCS Conference 1987 Conference Paper

The Multiplicative Complexity of Quadratic Boolean Forms

  • Roland Mirwald
  • Claus-Peter Schnorr

Let the multiplicative complexity L(f) of a boolean function f be the minimal number of ∧-gates that are sufficient to evaluate f by circuits over the basis ∧, ⊕, 1. We give a polynomial time algorithm which for quadratic boolean forms f=⊕i≠jaijxixj determines L(f) from the coefficients aij. Two quadratic forms f, g have the same complexity L(f) = L(g) iff they are isomorphic by a linear isomorphism. We also determine the multiplicative complexity of pairs of quadratic boolean forms. We give a geometric interpretation to the complexity L(f1, f2) of pairs of quadratic forms.

STOC Conference 1984 Conference Paper

An Efficient Signature Scheme Based on Quadratic Equations

  • H. Ong
  • Claus-Peter Schnorr
  • Adi Shamir

Electronic messages, documents and checks must be authenticated by digital signatures which are not forgeable even by their recipients. The RSA system can generate and verify such signatures, but each message requires hundreds of high precision modular multiplications which can be implemented efficiently only on special purpose hardware. In this paper we propose a new signature scheme which can be easily implemented in software on microprocessors: signature generation requires one modular multiplication and one modular division, signature verification requires three modular multiplications, and the key size is comparable to that of the RSA system. The new scheme is based on the quadratic equation m = s 2 1 + ks 2 2 (mod n), where m is the message, s 1 and s 2 are the signature, and k and n are the publicly known key. While we cannot prove that the security of the scheme is equivalent to factoring, all the known methods for solving this quadratic equation for arbitrary k require the extraction of square roots modulo n or the solution of similar problems which are at least as hard as factoring. A novel property of the new scheme is that legitimate users can choose k in such a way that they can sign messages even without knowing the factorization of n, and thus everyone can use the same modulus if no one knows its factorization.

FOCS Conference 1984 Conference Paper

RSA/Rabin Bits are 1/2 + 1/poly(log N) Secure

  • Werner Alexi
  • Benny Chor
  • Oded Goldreich 0001
  • Claus-Peter Schnorr

We prove that RSA least significant bit is 1/2 + (1/[log c N]) secure, for any constant c (where N is the RSA modulus). This means that an adversary, given the ciphertext, cannot guess the least sigiiilicatnt bit of the plaintext with probability better than 1/2 + (1/[log c N]), unless he can break RSA.

FOCS Conference 1982 Conference Paper

An O(n^3 log n) Deterministic and an O(n^3) Probabilistic Isomorphism Test for Trivalent Graphs

  • Zvi Galil
  • Christoph M. Hoffmann
  • Eugene M. Luks
  • Claus-Peter Schnorr
  • Andreas Weber 0006

The main results of this paper are an O(n3) probabilistic algorithm and an O(n3 log n) deterministic algorithm that test whether two given trivalent graphs are isomorphic. In fact, the algorithms construct the set of all isomorphisms of the two graphs. Variants of these algorithms construct the set of all automorphisms of a trivalent graph. The algorithms make use of some new improved permutation group algorithms that exploit the fact that the groups involved are 2-groups. A remarkable property of the probabilistic algorithm is that it computes Isoe, ei(X, Y), i = 1, .. ., m, m = O(n) (the set of all isomorhisms φ: X → Y with φ(e)=ei) for the cost of computing the single set Isoe, el(X, Y).

STOC Conference 1980 Conference Paper

Testing Polynomials which Are Easy to Compute (Extended Abstract)

  • Joos Heintz
  • Claus-Peter Schnorr

We exploit the fact that the set of all polynomials Pε@@@@[x 1 ,.,x n ] of degree ≤d which can be evaluated with ≤v nonscalar steps can be embedded into a Zariski-closed affine set W(d,n,v),dim W(d,n,v)≤(v+1 +n) 2 and deg W(d,n,v)≤(2vd) (v+1+n) 2 . As a consequence we prove that for u:= 2v(d+1) 2 and s:= 6(v+1+n) 2 there exist a 1 ,., a s ε [u] n = {1,2,.,u} n such that for all polynomials PεW(d,n,v):P( a 1 ) = p( a 2 ) =...= p( a s ) = O implies PΞO. This means that a 1 ,..., a s is a correct test sequence for a zero test on all polynomials in W(d,n,v). Moreover, “almost every” sequence a 1 ,., a s ε[u] n is such a correct test sequence for W(d,n,v). The existence of correct test sequences a 1 ,., a s ε [u] n is established by a counting argument without constructing a correct test sequence. We even show that it is beyond the known methods to establish (i.e. to construct and to prove correctness) of such a short correct test sequence for W(d,n,v). We prove that given such a short, correct test sequence for W(d,n,v) we can efficiently construct a multivariate polynomial Pε@@@@[x 1 ,.,x n ] with deg(P) = d and small integer coefficients such that P@@@@ W(d,n,v). For v>n log d lower bounds of this type are beyond our present methods in algebraic complexity theory.

MFCS Conference 1977 Invited Paper

Improved Lower Bounds on the Number of Multiplications/Divisions Which Are Necessary to Evaluate Polynomials

  • Claus-Peter Schnorr

Abstract We improve some lower bounds which have been obtained by Strassen and Lipton. In particular there exist polynomials of degree n with 0–1 coefficients that cannot be evaluated with less than \(\sqrt {n/}\) (4 log n) nonscalar multiplications/divisions. The evaluation of \(p(x) = \sum\limits_{\delta \doteq o}^n {e^{2\pi i/2^\delta } } x^\delta\) requires at least n/(12 log n) multiplications/divisions and at least \(\sqrt {n/ (8 log n)}\) nonscalar multiplications/divisions. We specify polynomials with algebraic coefficients that require n/2 multiplications/divisions.

STOC Conference 1972 Conference Paper

The Process Complexity and Effective Random Tests

  • Claus-Peter Schnorr

We propose a variant of the Kolmogorov concept of complexity which yields a common theory of finite and infinite random sequences. The process complexity does not oscillate. We establish some concepts of effective tests which are proved to be equivalent.

v2026.09.13