## Pollard’s P-1 Factorization Algorithm

### July 21, 2009

Our function is a straight forward statement of the algorithm:

`(define (factor n)`

(let loop1 ((b 7) (k 420))

(let loop2 ((a (randint 2 n)))

(let ((g (gcd a n)))

(if (< 1 g) g

(let ((d (gcd (- (expm a k n) 1) n)))

(cond ((= d 1)

(let ((b (+ b 1)))

(loop1 b (lcm k b))))

((= d n) (loop2 (randint 2 n)))

(else d))))))))

`Factor`

assumes that its argument is composite, and may return a composite. The `factors`

function, stolen from an earlier exercise, finds all the factors of a number:

`(define (factors n)`

(sort < (let fact ((n n) (fs '()))

(cond ((= n 1) fs)

((even? n) (fact (/ n 2) (cons 2 fs)))

((prime? n) (cons n fs))

(else (let ((f (factor n)))

(append fs (fact f '()) (fact (/ n f) '()))))))))

The factors of are:

`> (factors (- (expt 2 98) 1))`

(3 43 127 4363953127297 4432676798593)

We use rand, randint, expm, and sort from the Standard Prelude, and prime? is adapted from the exercise on primality checking using the Miller/Rabin algorithm. You can run the program at http://programmingpraxis.codepad.org/dx55xB8V.

Pages: 1 2

I wrote a prolog implementation ,which works now and then :), but not

always,most of the time it says ‘out of local stack’.

So i saved the result, factors are [4432676798593, 4363953127297, 127, 43, 3].

I would love to see the prolog code for the above problem.

a must be coprime to p, not any other number.

[...] have studied John Pollard’s p−1 algorithm for integer factorization on two previous occasions, giving first the basic single-stage algorithm and later adding a second stage. In [...]

`all_factors`

repeatedly applies a factorizing method`factor`

to`n`

:Besides

`modexp_big_int`

and`random_big_int`

, I need to compute lcms, in this case optimized by knowing that the first factor is always small:Finally, Pollard’s p-1:

This method seems to be much, much slower than Pollard’s Rho.

It shouldn’t be much, much slower than Pollard’s rho. The two methods are complementary. The rho method is generally used to find small factors, say from 4 to 12 digits, after trial division has found factors up to 3 digits. The p-1 method is generally used after the rho method has run for a while, in the hope that you get lucky and find a large factor, say 15 to 20 digits or sometimes more.

It’s been a while since I programmed in the ML family of languages, so I’ll ask some questions instead of making some statements.

1) I see only one bound b. If you look at the more recent p-1 exercise that uses the improved standard continuation, you’ll see a much faster version of the algorithm that uses two bounds b1 and b2.

2) In the pollard_pm1 function, the line let k = …, do you recompute the lcm at each b?

3) I don’t understand the List.fold_right in the line after that. You seem to be taking the product of all the primes less than b, but I’m not sure why.