Bach's algorithm is a probabilistic polynomial time algorithm for generating random numbers along with their factorization, named after its discoverer, Eric Bach. It is of interest because no algorithm is known that efficiently factors numbers, so the straightforward method, namely generating a random number and then factoring it, is impractical.
The algorithm performs, in expectation, O(log n) primality tests.
Bach's algorithm produces a number x uniformly at random between a given limit N and N/2, specifically , along with its factorization. It does this by picking a prime number p and an exponent a such that , according to a certain distribution. Bach's algorithm is then recursively applied to generate a number y uniformly at random between M and M/2, where , along with the factorization of y. It then sets , and appends to the factorization of y to produce the factorization of x. This gives x which logarithmic distribution over the desired range; rejection sampling is then used to get a uniform distribution.
- ↑ Bach, Eric. How to Generate Factored Random Numbers, SIAM Journal of Computing, 17 (1988), pp 179-193.
- ↑ Generating Random Factored Numbers, Easily: Adam Kalai, Journal of Cryptology, Vol 16, Number 4, 2003