Skip to content

Smooth Numbers

A positive integer is called $y$-smooth if all of its prime factors are at most $y$.

Definition

A positive integer is called yy-smooth if all of its prime factors are at most yy.

For example,

72=2332 72=2^3\cdot 3^2

is 33-smooth, because its only prime factors are 22 and 33. The integer

210=2357 210=2\cdot3\cdot5\cdot7

is 77-smooth, but not 55-smooth.

Smooth numbers are integers whose prime factors are small relative to their size. They form a sparse but highly structured subset of the positive integers.

The Smooth Counting Function

The main counting function for smooth numbers is

Ψ(x,y)=#{nx:n is y-smooth}. \Psi(x,y)=\#\{n\leq x : n \text{ is } y\text{-smooth}\}.

This function asks how many integers up to xx have no prime factor larger than yy.

The behavior of Ψ(x,y)\Psi(x,y) depends on the relation between xx and yy. If yxy\geq x, then every integer up to xx is yy-smooth. If yy is small, smooth numbers become rare.

A useful parameter is

u=logxlogy. u=\frac{\log x}{\log y}.

Equivalently,

y=x1/u. y=x^{1/u}.

Large uu means that yy is small compared with xx, so smoothness is a strong condition.

The Dickman Function

The density of smooth numbers is governed by the Dickman function ρ(u)\rho(u).

Roughly,

Ψ(x,y)xρ(u),u=logxlogy. \Psi(x,y)\approx x\rho(u), \qquad u=\frac{\log x}{\log y}.

The function ρ(u)\rho(u) is defined by

ρ(u)=1(0u1), \rho(u)=1 \qquad (0\leq u\leq 1),

and for u>1u>1, by the differential-delay equation

uρ(u)+ρ(u1)=0. u\rho'(u)+\rho(u-1)=0.

This function decreases rapidly as uu grows. It measures the probability that a random integer near xx has all prime factors at most x1/ux^{1/u}.

Heuristic Interpretation

A random integer near xx usually has some prime factors of moderate or large size. Requiring all prime factors to be at most yy imposes many restrictions at once.

If

y=x1/2, y=x^{1/2},

then u=2u=2. A yy-smooth integer has no prime factor larger than x\sqrt{x}. This excludes primes near xx, but still leaves many composite numbers.

If

y=x1/10, y=x^{1/10},

then u=10u=10. Smoothness is much rarer, because every prime factor must be quite small.

The Dickman function makes this heuristic precise in many ranges.

Smooth Numbers and Factorization

Smooth numbers are central in integer factorization algorithms.

Many factorization methods seek relations of the form

x2y2(modN). x^2\equiv y^2\pmod N.

To construct such relations, one often searches for integers whose residues factor completely over a small factor base.

For example, the quadratic sieve studies values

Q(t)=t2N. Q(t)=t^2-N.

If many values of Q(t)Q(t) are smooth, their prime factorizations can be combined through linear algebra over F2\mathbb{F}_2. This eventually produces a congruence of squares and may reveal a nontrivial factor of NN.

Thus the efficiency of factorization algorithms depends directly on the frequency of smooth numbers.

Factor Bases

A factor base is a chosen list of small primes

p1,p2,,pm. p_1,p_2,\ldots,p_m.

An integer is smooth over this factor base if it factors entirely into these primes.

For example, relative to the factor base

{2,3,5,7}, \{2,3,5,7\},

the integer

2437=336 2^4\cdot3\cdot7=336

is smooth, while

211=22 2\cdot11=22

is not.

Factor bases turn multiplicative arithmetic into linear algebra. Once a smooth integer is factored over the base, its exponent vector

(e1,,em) (e_1,\ldots,e_m)

records the powers of the primes. Reducing this vector modulo 22 allows one to detect products that become squares.

Smoothness Probability

The probability that a random integer near xx is yy-smooth is approximately

ρ(logxlogy). \rho\left(\frac{\log x}{\log y}\right).

This probability controls the expected running time of many algorithms.

If smooth values are too rare, the algorithm spends too much time searching. If the factor base is too large, linear algebra becomes expensive.

Practical algorithms must balance these costs.

This balance is one reason smooth numbers are so important in computational number theory: they determine the tradeoff between relation collection and matrix solving.

Powers and Multiplicative Structure

Smooth numbers are multiplicatively rich. If aa and bb are yy-smooth, then

ab ab

is also yy-smooth.

This closure under multiplication makes them useful in algorithms and algebraic constructions.

However, smooth numbers are not closed under addition. The sum of two smooth numbers may have a large prime factor.

This asymmetry reflects the fundamentally multiplicative nature of smoothness.

Friable Integers

Smooth numbers are also called friable integers, especially in analytic number theory.

The term emphasizes that such integers break apart into small prime pieces.

Analytic questions about friable integers include:

  • estimating Ψ(x,y)\Psi(x,y),
  • studying smooth numbers in arithmetic progressions,
  • counting smooth values of polynomials,
  • understanding gaps between smooth numbers.

These questions are technically subtle because smoothness depends on complete prime factorization.

Smooth Values of Polynomials

Many algorithms and conjectures concern smooth values of polynomial expressions.

For example, one may ask how often

f(n) f(n)

is yy-smooth for a polynomial f(x)Z[x]f(x)\in\mathbb{Z}[x].

This is much harder than studying random integers, because polynomial values have arithmetic biases.

In the number field sieve, one searches for simultaneous smoothness in rational and algebraic values. The success of the method depends on finding enough such values.

Smooth Numbers in Cryptography

Smoothness can weaken cryptographic systems.

For example, Pollard’s p1p-1 method factors an integer NN efficiently if some prime divisor pp has

p1 p-1

smooth.

Similarly, discrete logarithm algorithms often exploit smooth group orders or smooth auxiliary structures.

Therefore cryptographic parameter generation usually avoids primes for which nearby arithmetic quantities factor too smoothly.

Rough Numbers

The opposite of a smooth number is often called a rough number.

An integer is yy-rough if all of its prime factors are greater than yy.

Rough numbers also appear in sieve theory. While smooth numbers are built only from small primes, rough numbers avoid all small primes.

Both concepts measure how prime factors are distributed across size ranges.

Conceptual Importance

Smooth numbers connect the statistical behavior of prime factors with explicit computation.

They appear naturally in:

  • integer factorization,
  • discrete logarithm algorithms,
  • sieve methods,
  • probabilistic number theory,
  • cryptographic security analysis.

Their importance comes from a simple fact: small prime factors are easy to handle. When an integer factors entirely into small primes, it becomes computationally tractable.

Smooth numbers therefore form one of the main bridges between analytic estimates and practical algorithms in modern number theory.