Documentation

MIPRE.Foundations.LowDegree.BinaryNonresidueLoop

Bounded auxiliary root lifting #

This is the specified program for the odd-prime auxiliary stage. It repeatedly factors f(X^q), retaining the current f once factorization returns at most one factor. Nonterminal choices are clipped to the initial seed width, ensuring a global runtime bound even on malformed inputs. The statements here establish execution and size bounds; the nonresidue and termination correctness theorems are separate algebraic obligations.

@[reducible, inline]

Exponent minus one in unary, coefficient cap, done flag, and current polynomial.

Equations
Instances For

    One bounded root-lifting step, retaining the old polynomial at the stopping test.

    Equations
    • One or more equations did not get rendered due to their size.
    Instances For

      Stopping is absorbing, so padding the iteration budget is harmless.

      Each step retains both external parameters and respects the original width cap.

      The complete loop retains metadata and never exceeds the initial maximum width.

      Equations
      • One or more equations did not get rendered due to their size.
      Instances For
        Equations
        • One or more equations did not get rendered due to their size.
        Instances For
          Equations
          • One or more equations did not get rendered due to their size.
          Instances For

            The auxiliary root-lifting program initialized from the deterministic cyclotomic seed. The initial seed degree supplies the iteration budget, and its full width supplies the cap.

            Equations
            • One or more equations did not get rendered due to their size.
            Instances For

              The retained binary polynomial from the bounded auxiliary construction.

              Equations
              • One or more equations did not get rendered due to their size.
              Instances For