Talk:Integer factorization

message: (I also posted something similar to this at Talk:Fundamental theorem of arithmetic.)  Several sources I've seen only state the Fundamental Theorem of Arithmetic for integers strictly greater than 1.  Of course, I understand the argument about 1 being an empty product of primes, and I do admit that this convention makes the statement of the Fundamental Theorem of Arithmetic a lot cleaner.  Nevertheless, I think it's worthwhile at least to mention that there are two prevalent conventions.  We can do that here, or we can refer readers to the Fundamental theorem of arithmetic article if the change I propose is made there.  I don't mind making the changes myself, but I wanted some kind of discussion first.  For some odd reason, these small trivialities produce huge controversy and I don't want to step on anyone's toes.  VectorPosse 06:36, 3 March 2007 (UTC)
replies: text: Frankly, that seems out of context here - better to avoid mentioning it if possible and discuss the two conventions briefly at fundamental theorem of arithmetic and/or multiplication. Make sure to link the article empty product. Dcoetzee 22:03, 24 July 2007 (UTC)
replies: text: I agree that the question of the proper statement of the theorem is an unnecessary distraction in this context.  I've shortened what was there by simply stating it for all positive integers along with a parenthetical remark about the empty product convention.  Vaughan Pratt (talk) 22:02, 19 March 2016 (UTC)
thread_title:  One as an empty  product of primes 

message: It is relatively trivial to re-arrange the well-known (x+y)(x-y) formula to demonstrate that for any odd whole number 'a', there are two perfect squares 'b' and 'c' such that a + b = c.  Further, if you know 'b' and 'c', from these you can work out two factors of 'a' from the same formula (if 'a' is prime, obviously the two factors would be the number one and the number 'a' itself)
Are there any factorization algorithms which exploit this fact, and look for 'b' and 'c' to work out the factors indirectly?
I've looked down the list of methods here, but couldn't see anything obvious, though some of the maths goes over my head!
CG 80.229.220.254 (talk) 20:42, 25 May 2012 (UTC)
replies: text: Fermat's factorization method may be the simplest method exploiting this idea. Continued fraction factorization, the quadratic sieve and the number field sieve are more advanced algorithms that also try to represent n or a multiple of n as the difference of two squares. 178.195.225.28 (talk) 11:06, 26 May 2012 (UTC)

text: In short, it is very unlikely (i.e. impossible in practice) that the integer you wish to factorize can be represented as the difference of two squares. I doubt the attack is efficient anyway, but I don't have a convincing argument handy. Skippydo (talk) 14:08, 26 May 2012 (UTC)

text: That would be a slower version of Fermat's factorization method, which is already too slow to be used in practice. CRGreathouse (t | c) 03:46, 29 May 2012 (UTC)
thread_title:  Perfect Squares 

message: I do not see what the "Primes is in P" has to do with integer factorisation. Also, it seems illogical to have links to the Qsieve and MIRACL implementations without having direct links to state-of-the-art implementations such as MSIEVE (or YAFU), etc.   — Preceding unsigned comment added by 86.30.148.199 (talk) 17:03, 26 December 2012 (UTC)
thread_title:  External links quality 

message: Why the technical flag, inserted May 25 2013?  This article is about a mathematical concept and seems to define it well, with terms of less technicality, then proceed to describe various aspects of the concept and related concepts, some of which are quite technical.  But why the technical flag when the concept itself is defined clearly in simpler terms so that someone familar with those simpler terms should have little difficulty understanding the subject of this article?  There are many mathematical concepts of a level of technicality that will not be understood by someone unfamiliar with several prerequisites.  Is this flag suggesting that we can and should write all articles in such a way that a two year old can understand them without any previous or additional research? — Anita5192 (talk) 04:44, 27 May 2013 (UTC)
thread_title:  Technical flag 

message: I suggest adding a section containing a list of problems known to be equivalent to the problem of integer factorization. Such problems would include the breaking of the Rabin cryptosystem and of the Schmidt-Samoa cryptosystem. Knowledgeable people, please feel free to add.  — Preceding unsigned comment added by 109.100.71.130 (talk) 16:47, 19 April 2014 (UTC)
thread_title: Problems equivalent to integer factorization

message: Now, numbers less than how many bits can be factorized? (10^{495}-1)/9 has a 545-bit composite factor which doesn't have any known factors (See Factors of Repunit numbers), so the limit of bits must be less then 545 (That is, at most 544), but the limit of bits must be at least 200 (See Number factorizer), so I think the limit is 384 bits, but is it right? If not, what is the limit of bits? Is it 256? 320? or 512? 
However, a Mersenne composite number 2^{1061}-1, which has 1061 bits(See Factorb) , has be factored, why can it be factored?
— Preceding unsigned comment added by 61.219.149.55 (talk) 06:30, 6 May 2014 (UTC)
replies: text: There is no fixed limit and the used algorithms don't stop working at some size. They just require more computing power. The difficulty of factoring a number depends not only on the size of the number but also on the form of the number (2^{n}-1 is easier than most others), and the size and sometimes other properties of its prime factors. And whether a number with a given difficulty is factored depends on how much computer time people are willing to spend on it, and sometimes on whether they get lucky. Integer factorization records#Numbers of a special form says one of the phases for 2^{1061}-1 took about 300 CPU-years. RSA-768 on the same page says "They used the equivalent of almost 2000 years of computing on a single core 2.2 GHz AMD Opteron." Factoring is important in decryption so there is also the possibility that some organizations keep their capabilities secret. NSA#Computing has a lot of computing power and we don't know whether they have better algorithms than what is publicy known. PrimeHunter (talk) 23:57, 8 May 2014 (UTC)

text: As I said: "whether a number with a given difficulty is factored depends on how much computer time people are willing to spend on it". Apparently nobody has yet spend the time to factor this. It's non-trivial but certainly can be done. There are many people working on factoring bn±1 for small b including 10, and they will surely get to this number at some time. If you are interested in factoring discussions then check out http://mersenneforum.org/. PrimeHunter (talk) 11:35, 12 May 2014 (UTC)
replies: text:  Also, even a tiny amount of research  would have shown that the number is mostly factored, with only a 164-digit cofactor. In any case take this discussion elsewhere, the purpose of the Talk pages is to build an encyclopedia not discuss ancillary topics. - CRGreathouse (t | c) 23:33, 14 May 2014 (UTC)
thread_title:  The limit of Integer factorization 

message: Does anyone else laugh when they get to that line? 68.2.235.85 (talk)  —Preceding undated comment added 00:27, 6 June 2016 (UTC)
thread_title:  "It factored the number 15" 

message: Look at this presentation.
Bosons1978 (talk) 15:32, 11 February 2021 (UTC)
replies: text: This is a self published source, so it cannot be used in Wikipedia per policy WP:NOR. Moreover, I have had a quick look on the link, and it is almost immediately clear that the algorithm cannot be correct. Also, if it were correct and as fast as claimed, this would be cited in many articles, and even in news, which is not the case. D.Lazard (talk) 16:24, 11 February 2021 (UTC)

text: Unlike many other crank-magnet problems (e.g. P vs NP), there's a very very easy way to get taken seriously. Publish the factors of RSA-2048. If anyone does that, we can throw out WP:RS and WP:NOR out the window, per WP:SKYBLUE. I'm not holding my breath here, but has this author done so? Suffusion of Yellow (talk) 20:00, 11 February 2021 (UTC)

text: As it's now published in a journal. I've gone ahead and made an edit to the main page. Balupton (talk) 02:10, 3 March 2021 (UTC)
replies: text: eprint.iacr.org is a preprint server, not a journal. As their homepage says, . XOR'easter (talk) 02:18, 3 March 2021 (UTC)

text: Also, the text abstract and the one in the PDF itself don't match; in particular, the statement "This destroyes [sic] the RSA cryptosystem" was tacked on to the text version, which is iffy. A bit more eyebrow-raising is that the PDF is labeled , while the author's website has what appears to be a more recent version, dated . Something's off. XOR'easter (talk) 05:21, 3 March 2021 (UTC)

text: I agree. It is highly unlikely that the claim is correct, and it fails Wikipedia's verifiability standards. NealKoblitz (talk) 12:04, 5 March 2021 (UTC)
thread_title:  Is RSA cryptosystem broken ? 

message: Just kidding, of course. But in the section "Prime decomposition" is the line b = \sqrt{a^2 - n} = \sqrt{4} = 2b , which is either (a) missing punctuation or more likely (b) has an extraneous 'b' at the end. Now I've done my share of factoring, but that was 50 yarn ago. Would someone more active kindly make the edit? Thanks, JohnH~enwiki (talk) 20:10, 19 July 2023 (UTC)
replies: text: I have removed the wrong b. PrimeHunter (talk) 22:56, 19 July 2023 (UTC)
thread_title:  b = 2b proven?