Tell me more ×
Mathematics Stack Exchange is a question and answer site for people studying math at any level and professionals in related fields. It's 100% free, no registration required.

If a solution was found to the Riemann Hypothesis, would it have any effect on the security of things such as RSA protection? Would it make cracking large numbers easier?

share|improve this question
13  
For what it's worth, this (mis)conception was popularized in an episode of the show Numbers – Joseph Weissman Oct 3 '11 at 19:56
@Joe Indeed, I thought that might be the case! – Freeman Oct 4 '11 at 7:23

4 Answers

up vote 27 down vote accepted

If by "solution" you mean confirmation or counterexample, then no. Clearly, one could just in good faith assume the result, and go on to produce some algorithmic whose validity requires the Riemann hypothesis, and use it to break RSA codes. Simply knowing the Riemann hypothesis is true doesn't help you construct any factorization method (although it does tell you a theoretical bound on how good certain algorithms can run).

There is one other possibility however. The idea of a solution to the Riemann Hypothesis really gets a mathematicians tongue salivating, not necessarily because it's so important itself that all the non-trivial zeros lie on the critical strip, but because chances are that a proof of RH requires genuinely new, creative techniques/ways of thinking. Hopefully we can expand on the proof and use these new techniques for other problems. For example, the methods introduced by Andrew Wiles in proving Fermat's Last theorem have been extended to make some (limited) progress into special cases of the Birch-Swinnerton Dyer conjecture. It could well be the case that the proof of the Riemann Hypothesis introduces extremely strong tools and new methods which give insight into the distribution of the primes, in even more detail than RH yields, which could potentially increase the efficiency of factorization algorithms to a point where a supercomputer could realistically crack an RSA code.

share|improve this answer
3  
Dear Ragib, A side remark: while the work of Wiles has certainly been extended by many people, the main thrust has not been BSD. (I wonder what particular work you have in mind.) I think that Fontaine--Mazur, Serre's conjecture, and Sato--Tate would be better things to point to here. Regards, – Matt E Oct 4 '11 at 4:37
Thank you, this is very thorougher, this is what I was hoping for also! – Freeman Oct 4 '11 at 7:25
@Matt I agree the relation to BSD is relatively weak (I was thinking of using Taniyama-Shimura to strengthen results of Gross/Zaiger and Kolyvagin - see en.wikipedia.org/wiki/…), but I chose to mention it because it's a very famous problem. – Ragib Zaman Oct 4 '11 at 9:11
@LHS I'm glad you liked my post. Perhaps you could accept it as an answer :) ? – Ragib Zaman Oct 4 '11 at 9:11
1  
I don't think the modularity theorems "strengthened results of Gross/Zagier and Kolyvagin", any more than an oracle telling you RH is true (without providing a proof or new insights) would strengthen a factoring algorithm whose runtime is estimated based on RH. The methods of Wiles and his students have been used for BSD in the formal book-keeping sense that theorems true for modular elliptic curves became applicable to more curves as the adjective "modular" spread to cover larger and larger classes of elliptic curves over Q. – zyx Oct 4 '11 at 19:45
show 1 more comment

No. Practical applications can simply assume the truth of the Riemann hypothesis; proving it would increase knowledge but not itself affect security.

share|improve this answer
10  
What about disproving it? – Pierre-Yves Gaillard Oct 3 '11 at 15:25
7  
@Pierre I don't want to live in such a world. – Ragib Zaman Oct 3 '11 at 16:11
@Pierre-Yves Gaillard: That wouldn't directly affect it either, though perhaps if a zero off the line was found it would mean something for some subalgorithm. None come to mind. – Charles Oct 3 '11 at 16:14

No, I don't believe so. The Riemann hypothesis controls (in some statistical sense) the distribution of primes, and one can prove stronger results about the running time of various number-theoretic algorithms if one knows that RH (or some its generalizations) are true.

However, in practice (e.g. if you are an intelligence agency trying to crack encrypted data) I think you can assume that all running time estimates whose truth hinges on RH are in fact true, since there is every reason to believe that RH is true. Thus these algorithms will in fact (with near certainty) behave as RH predicts that they would.

share|improve this answer
11  
The designers and the attackers of the algorithms freely assume any conjecture that is helpful, so RH is "built in". It's not as though any type of cryptanalysis is waiting on a resolution of RH to certify that it will work. What would change everything is if present expectations about P (not) = NP are wrong. – zyx Oct 3 '11 at 15:49
Thanks! This is what I suspected :) – Freeman Oct 4 '11 at 7:21

If RH is shown to be false, it would mean that the distribution of primes has more structure than anticipated (or a different type of structure, such as unusual correlations where independence was expected) and conceivably that could be leveraged for cryptanalysis of RSA or other number theoretic codes.

If RH is shown to be true, it is likely to be as a result of proving that some symmetries or algebraic structures connected to prime numbers, structures that are presently conjectural and not precisely understood, do exist. There are such structures that exist for function fields and have applications to cryptography (Frobenius map, Weil pairings, and etale cohomology come to mind) and it's possible that the expected but currently undiscovered constructions in the number field case would also be useful for making or breaking codes.

Of course any big leap in understanding of number theory would lead to a reconsideration of number theoretic algorithms in general, especially the ones in cryptography.

share|improve this answer
Thank you, this is very helpful – Freeman Oct 4 '11 at 7:22
Good answer. If RH was disproved that itself would not affect security, but studying the proof and the reasons for the failure might well lead to attacks. But it's hard to say what they might be since we don't know what the proof would look like (since we don't think there is such a proof). – Charles Dec 8 '11 at 20:10

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.