what does sigma mean in ECM?

[bbb120]

I recently take great interest in ECM factorization ,
https://members.loria.fr/PZimmermann...ds/ecmnet.html
what sigma can be used for ?

[DukeBG]

I'll keep it simple.
When factoring with ECM, you run the algorithm on the numer using multiple different curves of the same "size", each of which can yield a factor (or not). It is known how many (different) curves you need at each factor size to get a certain probability to find a factor (of that size). The sigma parameter is a number, from which the parameters (like coefficients) of the curve are derived. Testing with the same number with the same sigma, b1 and b2 would yield absolutely the same result. Running 100 curves means randomly chosing 100 sigmas.
You might also notice that sigmas start with "0:" or "1:" – those are different parametizations. Basically, also just different ways to get curves.

[bbb120]

https://members.loria.fr/PZimmermann...s/ecm/go.magma
I found it,
but why do no use A and B instead of sigma (where y^2=x^3+A*x+B)?
Is sigma much more useful than A and B?

[bbb120]

FindGroupOrder := function (p, sigma)
   K := GF(p);
   v := K ! (4*sigma);
   u := K ! (sigma^2-5);
   x := u^3;
   b := 4*x*v;
   a := (v-u)^3*(3*u+v);
   A := a/b-2;
   x := x/v^3;
   b := x^3 + A*x^2 + x;
   E := EllipticCurve([0,b*A,0,b^2,0]);
   return FactoredOrder(E);
end function;
p:=40122362455616221971122353;
sigma:=2334843726764251;
FindGroupOrder(p,sigma);

http://magma.maths.usyd.edu.au/calc/
magma calculator online

output
[ <2, 3>, <3, 1>, <5, 1>, <19, 1>, <71, 1>, <281, 1>, <331, 1>, <4271, 1>,
<8887, 1>, <70206001, 1> ]

[bbb120]

https://members.loria.fr/PZimmermann...op10-2018.html

FindGroupOrder := function (p, sigma)
   K := GF(p);
   v := K ! (4*sigma);
   u := K ! (sigma^2-5);
   x := u^3;
   b := 4*x*v;
   a := (v-u)^3*(3*u+v);
   A := a/b-2;
   x := x/v^3;
   b := x^3 + A*x^2 + x;
   E := EllipticCurve([0,b*A,0,b^2,0]);
   return FactoredOrder(E);
end function;
p:=444391024295554825813920762553875384889500352609895126972409492191251;
sigma:=2807183577;
FindGroupOrder(p,sigma);

[ <2, 3>, <3, 2>, <5, 1>, <7, 1>, <3347, 1>, <4363, 1>, <295751, 1>, <6746549,
1>, <22098383, 1>, <136265083, 1>, <396868981, 1>, <809136473, 1>,
<6258955966441, 1> ]

[storm5510]

Originally Posted by DukeBG

I'll keep it simple.

When factoring with ECM, you run the algorithm on the number using multiple different curves of the same "size", each of which can yield a factor (or not). It is known how many (different) curves you need at each factor size to get a certain probability to find a factor (of that size). The sigma parameter is a number, from which the parameters (like coefficients) of the curve are derived. Testing with the same number with the same sigma, b1 and b2 would yield absolutely the same result. Running 100 curves means randomly choosing 100 sigmas.

You might also notice that sigmas start with "0:" or "1:" – those are different parametizations. Basically, also just different ways to get curves.

I have wondered about the purpose of Sigma for a long time. I cannot say that I understand all of what is above. Only some of it. It appears that B1 and B2 dictate the size of the curve. In time, I can probably get the rest of it.