A few years ago my coauthor and I was wondering if we could reduce the number of multiplications used for hashing algorithms. We had a construction and a 100 page proof, but we were not 100% sure it was correct. Now we have a full Lean proof, so we decided to publish it.
I made this website to make it easy for anyone how has polynomials to evaluate to see how it would be done using our method, as well as a number of previous approaches by Knuth and others.
I read your arxiv paper yesterday (or was it the day before).
Do you think this can be used to speed up the algebraic method for k-path?
If so, you should enter next years PACE challenge.
huhtenbergtoday at 10:12 AM
* "monic" = the leading coefficient is 1
pvillanotoday at 6:25 AM
This is super cool. I learned a lot playing with the demo. I only knew Horner and Estrin, but I think I've gotten a grasp on most of them.
One small change I'd recommend is for the graph visualization, have a separate source node for each x, x^2, x^4 used. A single x source clutters the graph and hides the structure.
IsTomtoday at 9:21 AM
Pretty cool, especially in finite fields. Though coefficients seem to blow up pretty quick in Q?
throwaway81523today at 6:14 AM
If you're going to preprocess the polynomial, maybe you want to evaluate it at many different points. But then why not use the FFT?
voxelghosttoday at 2:30 AM
It keeps flipping back to 'monic' from e.g. 'ln(1+x)' when switching between algorithms, and then seems to lock to 'monic'? (Am I missing something?)
Also I am curious, in your version vs. horner , how do both algorithms map onto number of fmadd operations?
deletedyesterday at 9:18 AM
vlovich123today at 2:30 AM
Would this be applicable to fast hashes like WyHash and xxh3 or are those not using polynomials? Is this mainly for faster cryptographic hashes?
I guess itβs not faster than using a table for CRC8?
gowldtoday at 2:37 AM
From the abstract, a name that many on HN would recognize:
> We also give an injective polynomial construction for universal hashing that uses N multiplications to hash 2N values with a single random key. This improves the best previous construction by Daniel J. Bernstein (this http URL).
gowldtoday at 2:33 AM
What is the tradeoff between multiplication and addition?