/* mpn_gcdext -- Extended Greatest Common Divisor. Copyright 1996, 1998, 2000, 2001, 2002, 2003, 2004, 2005, 2008, 2009 Free Software Foundation, Inc. This file is part of the GNU MP Library. The GNU MP Library is free software; you can redistribute it and/or modify it under the terms of the GNU Lesser General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. The GNU MP Library is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should have received a copy of the GNU Lesser General Public License along with the GNU MP Library. If not, see http://www.gnu.org/licenses/. */ #include "gmp.h" #include "gmp-impl.h" #include "longlong.h" /* Computes (r;b) = (a; b) M. Result is of size n + M->n +/- 1, and the size is returned (if inputs are non-normalized, result may be non-normalized too). Temporary space needed is M->n + n. */ static size_t hgcd_mul_matrix_vector (struct hgcd_matrix *M, mp_ptr rp, mp_srcptr ap, mp_ptr bp, mp_size_t n, mp_ptr tp) { mp_limb_t ah, bh; /* Compute (r,b) <-- (u00 a + u10 b, u01 a + u11 b) as t = u00 * a r = u10 * b r += t; t = u11 * b b = u01 * a b += t; */ if (M->n >= n) { mpn_mul (tp, M->p[0][0], M->n, ap, n); mpn_mul (rp, M->p[1][0], M->n, bp, n); } else { mpn_mul (tp, ap, n, M->p[0][0], M->n); mpn_mul (rp, bp, n, M->p[1][0], M->n); } ah = mpn_add_n (rp, rp, tp, n + M->n); if (M->n >= n) { mpn_mul (tp, M->p[1][1], M->n, bp, n); mpn_mul (bp, M->p[0][1], M->n, ap, n); } else { mpn_mul (tp, bp, n, M->p[1][1], M->n); mpn_mul (bp, ap, n, M->p[0][1], M->n); } bh = mpn_add_n (bp, bp, tp, n + M->n); n += M->n; if ( (ah | bh) > 0) { rp[n] = ah; bp[n] = bh; n++; } else { /* Normalize */ while ( (rp[n-1] | bp[n-1]) == 0) n--; } return n; } #define COMPUTE_V_ITCH(n) (2*(n)) /* Computes |v| = |(g - u a)| / b, where u may be positive or negative, and v is of the opposite sign. max(a, b) is of size n, u and v at most size n, and v must have space for n+1 limbs. */ static mp_size_t compute_v (mp_ptr vp, mp_srcptr ap, mp_srcptr bp, mp_size_t n, mp_srcptr gp, mp_size_t gn, mp_srcptr up, mp_size_t usize, mp_ptr tp) { mp_size_t size; mp_size_t an; mp_size_t bn; mp_size_t vn; ASSERT (n > 0); ASSERT (gn > 0); ASSERT (usize != 0); size = ABS (usize); ASSERT (size <= n); ASSERT (up[size-1] > 0); an = n; MPN_NORMALIZE (ap, an); ASSERT (gn <= an); if (an >= size) mpn_mul (tp, ap, an, up, size); else mpn_mul (tp, up, size, ap, an); size += an; if (usize > 0) { /* |v| = -v = (u a - g) / b */ ASSERT_NOCARRY (mpn_sub (tp, tp, size, gp, gn)); MPN_NORMALIZE (tp, size); if (size == 0) return 0; } else { /* |v| = v = (g - u a) / b = (g + |u| a) / b. Since g <= a, (g + |u| a) always fits in (|usize| + an) limbs. */ ASSERT_NOCARRY (mpn_add (tp, tp, size, gp, gn)); size -= (tp[size - 1] == 0); } /* Now divide t / b. There must be no remainder */ bn = n; MPN_NORMALIZE (bp, bn); ASSERT (size >= bn); vn = size + 1 - bn; ASSERT (vn <= n + 1); mpn_divexact (vp, tp, size, bp, bn); vn -= (vp[vn-1] == 0); return vn; } /* Temporary storage: Initial division: Quotient of at most an - n + 1 <= an limbs. Storage for u0 and u1: 2(n+1). Storage for hgcd matrix M, with input ceil(n/2): 5 * ceil(n/4) Storage for hgcd, input (n + 1)/2: 9 n/4 plus some. When hgcd succeeds: 1 + floor(3n/2) for adjusting a and b, and 2(n+1) for the cofactors. When hgcd fails: 2n + 1 for mpn_gcdext_subdiv_step, which is less. For the lehmer call after the loop, Let T denote GCDEXT_DC_THRESHOLD. For the gcdext_lehmer call, we need T each for u, a and b, and 4T+3 scratch space. Next, for compute_v, we need T for u, T+1 for v and 2T scratch space. In all, 7T + 3 is sufficient for both operations. */ /* Optimal choice of p seems difficult. In each iteration the division * of work between hgcd and the updates of u0 and u1 depends on the * current size of the u. It may be desirable to use a different * choice of p in each iteration. Also the input size seems to matter; * choosing p = n / 3 in the first iteration seems to improve * performance slightly for input size just above the threshold, but * degrade performance for larger inputs. */ #define CHOOSE_P_1(n) ((n) / 2) #define CHOOSE_P_2(n) ((n) / 3) mp_size_t mpn_gcdext (mp_ptr gp, mp_ptr up, mp_size_t *usizep, mp_ptr ap, mp_size_t an, mp_ptr bp, mp_size_t n) { mp_size_t talloc; mp_size_t scratch; mp_size_t matrix_scratch; mp_size_t ualloc = n + 1; struct gcdext_ctx ctx; mp_size_t un; mp_ptr u0; mp_ptr u1; mp_ptr tp; TMP_DECL; ASSERT (an >= n); ASSERT (n > 0); ASSERT (bp[n-1] > 0); TMP_MARK; /* FIXME: Check for small sizes first, before setting up temporary storage etc. */ talloc = MPN_GCDEXT_LEHMER_N_ITCH(n); /* For initial division */ scratch = an - n + 1; if (scratch > talloc) talloc = scratch; if (ABOVE_THRESHOLD (n, GCDEXT_DC_THRESHOLD)) { /* For hgcd loop. */ mp_size_t hgcd_scratch; mp_size_t update_scratch; mp_size_t p1 = CHOOSE_P_1 (n); mp_size_t p2 = CHOOSE_P_2 (n); mp_size_t min_p = MIN(p1, p2); mp_size_t max_p = MAX(p1, p2); matrix_scratch = MPN_HGCD_MATRIX_INIT_ITCH (n - min_p); hgcd_scratch = mpn_hgcd_itch (n - min_p); update_scratch = max_p + n - 1; scratch = matrix_scratch + MAX(hgcd_scratch, update_scratch); if (scratch > talloc) talloc = scratch; /* Final mpn_gcdext_lehmer_n call. Need space for u and for copies of a and b. */ scratch = MPN_GCDEXT_LEHMER_N_ITCH (GCDEXT_DC_THRESHOLD) + 3*GCDEXT_DC_THRESHOLD; if (scratch > talloc) talloc = scratch; /* Cofactors u0 and u1 */ talloc += 2*(n+1); } tp = TMP_ALLOC_LIMBS(talloc); if (an > n) { mpn_tdiv_qr (tp, ap, 0, ap, an, bp, n); if (mpn_zero_p (ap, n)) { MPN_COPY (gp, bp, n); *usizep = 0; TMP_FREE; return n; } } if (BELOW_THRESHOLD (n, GCDEXT_DC_THRESHOLD)) { mp_size_t gn = mpn_gcdext_lehmer_n(gp, up, usizep, ap, bp, n, tp); TMP_FREE; return gn; } MPN_ZERO (tp, 2*ualloc); u0 = tp; tp += ualloc; u1 = tp; tp += ualloc; ctx.gp = gp; ctx.up = up; ctx.usize = usizep; { /* For the first hgcd call, there are no u updates, and it makes some sense to use a different choice for p. */ /* FIXME: We could trim use of temporary storage, since u0 and u1 are not used yet. For the hgcd call, we could swap in the u0 and u1 pointers for the relevant matrix elements. */ struct hgcd_matrix M; mp_size_t p = CHOOSE_P_1 (n); mp_size_t nn; mpn_hgcd_matrix_init (&M, n - p, tp); nn = mpn_hgcd (ap + p, bp + p, n - p, &M, tp + matrix_scratch); if (nn > 0) { ASSERT (M.n <= (n - p - 1)/2); ASSERT (M.n + p <= (p + n - 1) / 2); /* Temporary storage 2 (p + M->n) <= p + n - 1 */ n = mpn_hgcd_matrix_adjust (&M, p + nn, ap, bp, p, tp + matrix_scratch); MPN_COPY (u0, M.p[1][0], M.n); MPN_COPY (u1, M.p[1][1], M.n); un = M.n; while ( (u0[un-1] | u1[un-1] ) == 0) un--; } else { /* mpn_hgcd has failed. Then either one of a or b is very small, or the difference is very small. Perform one subtraction followed by one division. */ u1[0] = 1; ctx.u0 = u0; ctx.u1 = u1; ctx.tp = tp + n; /* ualloc */ ctx.un = 1; /* Temporary storage n */ n = mpn_gcd_subdiv_step (ap, bp, n, 0, mpn_gcdext_hook, &ctx, tp); if (n == 0) { TMP_FREE; return ctx.gn; } un = ctx.un; ASSERT (un < ualloc); } } while (ABOVE_THRESHOLD (n, GCDEXT_DC_THRESHOLD)) { struct hgcd_matrix M; mp_size_t p = CHOOSE_P_2 (n); mp_size_t nn; mpn_hgcd_matrix_init (&M, n - p, tp); nn = mpn_hgcd (ap + p, bp + p, n - p, &M, tp + matrix_scratch); if (nn > 0) { mp_ptr t0; t0 = tp + matrix_scratch; ASSERT (M.n <= (n - p - 1)/2); ASSERT (M.n + p <= (p + n - 1) / 2); /* Temporary storage 2 (p + M->n) <= p + n - 1 */ n = mpn_hgcd_matrix_adjust (&M, p + nn, ap, bp, p, t0); /* By the same analysis as for mpn_hgcd_matrix_mul */ ASSERT (M.n + un <= ualloc); /* FIXME: This copying could be avoided by some swapping of * pointers. May need more temporary storage, though. */ MPN_COPY (t0, u0, un); /* Temporary storage ualloc */ un = hgcd_mul_matrix_vector (&M, u0, t0, u1, un, t0 + un); ASSERT (un < ualloc); ASSERT ( (u0[un-1] | u1[un-1]) > 0); } else { /* mpn_hgcd has failed. Then either one of a or b is very small, or the difference is very small. Perform one subtraction followed by one division. */ ctx.u0 = u0; ctx.u1 = u1; ctx.tp = tp + n; /* ualloc */ ctx.un = un; /* Temporary storage n */ n = mpn_gcd_subdiv_step (ap, bp, n, 0, mpn_gcdext_hook, &ctx, tp); if (n == 0) { TMP_FREE; return ctx.gn; } un = ctx.un; ASSERT (un < ualloc); } } /* We have A = ... a + ... b B = u0 a + u1 b a = u1 A + ... B b = -u0 A + ... B with bounds |u0|, |u1| <= B / min(a, b) We always have u1 > 0, and u0 == 0 is possible only if u1 == 1, in which case the only reduction done so far is a = A - k B for some k. Compute g = u a + v b = (u u1 - v u0) A + (...) B Here, u, v are bounded by |u| <= b, |v| <= a */ ASSERT ( (ap[n-1] | bp[n-1]) > 0); if (UNLIKELY (mpn_cmp (ap, bp, n) == 0)) { /* Must return the smallest cofactor, +u1 or -u0 */ int c; MPN_COPY (gp, ap, n); MPN_CMP (c, u0, u1, un); /* c == 0 can happen only when A = (2k+1) G, B = 2 G. And in this case we choose the cofactor + 1, corresponding to G = A - k B, rather than -1, corresponding to G = - A + (k+1) B. */ ASSERT (c != 0 || (un == 1 && u0[0] == 1 && u1[0] == 1)); if (c < 0) { MPN_NORMALIZE (u0, un); MPN_COPY (up, u0, un); *usizep = -un; } else { MPN_NORMALIZE_NOT_ZERO (u1, un); MPN_COPY (up, u1, un); *usizep = un; } TMP_FREE; return n; } else if (UNLIKELY (u0[0] == 0) && un == 1) { mp_size_t gn; ASSERT (u1[0] == 1); /* g = u a + v b = (u u1 - v u0) A + (...) B = u A + (...) B */ gn = mpn_gcdext_lehmer_n (gp, up, usizep, ap, bp, n, tp); TMP_FREE; return gn; } else { mp_size_t u0n; mp_size_t u1n; mp_size_t lehmer_un; mp_size_t lehmer_vn; mp_size_t gn; mp_ptr lehmer_up; mp_ptr lehmer_vp; int negate; lehmer_up = tp; tp += n; /* Call mpn_gcdext_lehmer_n with copies of a and b. */ MPN_COPY (tp, ap, n); MPN_COPY (tp + n, bp, n); gn = mpn_gcdext_lehmer_n (gp, lehmer_up, &lehmer_un, tp, tp + n, n, tp + 2*n); u0n = un; MPN_NORMALIZE (u0, u0n); ASSERT (u0n > 0); if (lehmer_un == 0) { /* u == 0 ==> v = g / b == 1 ==> g = - u0 A + (...) B */ MPN_COPY (up, u0, u0n); *usizep = -u0n; TMP_FREE; return gn; } lehmer_vp = tp; /* Compute v = (g - u a) / b */ lehmer_vn = compute_v (lehmer_vp, ap, bp, n, gp, gn, lehmer_up, lehmer_un, tp + n + 1); if (lehmer_un > 0) negate = 0; else { lehmer_un = -lehmer_un; negate = 1; } u1n = un; MPN_NORMALIZE (u1, u1n); ASSERT (u1n > 0); ASSERT (lehmer_un + u1n <= ualloc); ASSERT (lehmer_vn + u0n <= ualloc); /* We may still have v == 0 */ /* Compute u u0 */ if (lehmer_un <= u1n) /* Should be the common case */ mpn_mul (up, u1, u1n, lehmer_up, lehmer_un); else mpn_mul (up, lehmer_up, lehmer_un, u1, u1n); un = u1n + lehmer_un; un -= (up[un - 1] == 0); if (lehmer_vn > 0) { mp_limb_t cy; /* Overwrites old u1 value */ if (lehmer_vn <= u0n) /* Should be the common case */ mpn_mul (u1, u0, u0n, lehmer_vp, lehmer_vn); else mpn_mul (u1, lehmer_vp, lehmer_vn, u0, u0n); u1n = u0n + lehmer_vn; u1n -= (u1[u1n - 1] == 0); if (u1n <= un) { cy = mpn_add (up, up, un, u1, u1n); } else { cy = mpn_add (up, u1, u1n, up, un); un = u1n; } up[un] = cy; un += (cy != 0); ASSERT (un < ualloc); } *usizep = negate ? -un : un; TMP_FREE; return gn; } }