1: \begin{abstract}

2: We describe a space-efficient algorithm for solving a generalization of the

3: subset sum problem in a finite group $G$, using a Pollard-$\rho$ approach.

4: Given an element $z$ and a sequence of elements $S$, our algorithm attempts to

5: find a subsequence of $S$ whose product in $G$ is equal to~$z$. For a random

6: sequence $S$ of length $d\log_2 n$, where $n=\#G$ and $d \ge 2$ is a constant,

7: we find that its expected running time is $O(\sqrt{n}\log n)$ group operations

8: (we give a rigorous proof for $d > 4$), and it only needs to store $O(1)$

9: group elements.  We consider applications to class groups of imaginary quadratic

10: fields, and to finding isogenies between elliptic curves over a finite field.

11: \end{abstract}

12: