7a62ab1938
The relevant result (Damgård, Landrock, and Pomerance, Average Case Error Estimates for the Strong Probably Prime Test) is only applicable for randomly selected candidates. It relies on there being very few odd composites with many false witnesses. (If testing an adversarially-selected composite, false witnesses are bounded by ϕ(n)/4 for n != 9, so one needs about 40 iterations for a 2^-80 false positive rate.) Change-Id: I2a063dac5f9042dcb9e6affee8d2ae575f2238a9 Reviewed-on: https://boringssl-review.googlesource.com/26972 Reviewed-by: Adam Langley <agl@google.com> |
||
|---|---|---|
| .. | ||
| openssl | ||