🤖 AI Summary
This work addresses the long-standing challenge of correctness verification in Montgomery-type modular reduction algorithms. We propose a unified algebraic modeling framework grounded in the Chinese Remainder Theorem (CRT) and Qin Jiushao’s polynomial evaluation identity. First, we formally derive the standard Montgomery reduction algorithm directly via CRT, exposing its intrinsic algebraic structure. Second, we establish the first extensible verification paradigm covering diverse state-of-the-art variants—including CIOS and FIPS 186-4—enabling automated counterexample generation and defect localization. Rigorously verifying over ten mainstream variants, we identify and correct multiple algorithmic errors previously reported in authoritative cryptographic literature. Our framework not only provides a rigorous theoretical foundation for Montgomery-type reductions but also introduces a novel algebraic methodology for the formal verification of cryptographic algorithms, advancing both foundational understanding and practical assurance in cryptographic implementation.
📝 Abstract
This paper explores the ability of the Chinese Remainder Theorem formalism to model Montgomery-type algorithms. A derivation of CRT based on Qin's Identity gives Montgomery reduction algorithm immediately. This establishes a unified framework to treat modular reduction algorithms of Montgomery-type. Several recent notable variants of Montgomery algorithm are analyzed, validation of these methods are performed within the framework. Problems in some erroneous design of reduction algorithms of Montgomery-type in the literature are detected and counter examples are easily generated by using the CRT formulation.