1
$\begingroup$

In wikipedia source: http://en.wikipedia.org/wiki/Quadratic_residue

under "composite modulus" section

I found the line "On the other hand, if we want to know if there is a solution for x less than some given limit c, this problem is NP-complete;however, this is a fixed-parameter tractable problem, where c is the parameter."

what does it mean by "given limit c , and fixed parameter tractable with c as parameter". Does this mean regardless of large values are given for c as a limit , we can solve the quadratic congruence without knowing the factorization? or does it has any other meaning?
what is the limit of c such that we cannot solve quadratic congruence using fpt

If i am wrong or obscure in my question, please notify me.

2 Answers 2

1

We don't need to square every number below $c$!

If $a$ is a quadratic residue $\pmod{n}$, we can say if there is some positive integer $x that satisfy

$ x^2 = kn + a $

through a sieve. We have $k\leq\lfloor\frac{c^2}{n}\rfloor=K$ and $kn+a$ is a square, so it is a quadratic residue for every prime $p$. Let $N_p$ be the set of non-quadratic residues $\pmod{p}$: we can get rid of any $k\in[0,K]$ such that $kn+a\in N_p$; so, by taking about $\log K$ primes and sieving, only a limited number of potential solutions remain and has to be checked.

  • 0
    :I know 'am missing some important point. So , what i understood is, it requires only ((∑(p=0 to floor(logK))N_p) * log(K)) values to obtain the set of potential solutions. Then , even if we set c near to n, it should be easy to compute the solutions of x value. If that's the picture, then why cant we compute x for given a , such that x^2=a(mod n), provide n is a very very large(ex: a 400 digit number) composite number . What i am i missing here?2012-10-12
0

That Wikipedia article isn't very clear about what the inputs are and how their size is modelled. I'd understand the passage you cite to refer to the fact that for fixed $c$ the complexity of finding a square root $x$ with $x^2=a\pmod n$ is polynomial in $a$ and $n$ since you just have to square $c$ different values and the complexity of squaring is polynomial in $a$ and $n$.

  • 0
    :thank you joriki. I got (not all but) some understanding of my question2012-10-12