Get all the updates for this publication
In this paper, we consider RSA with , where are of same bit size, i.e., . We study the weaknesses of RSA when multiple encryption and decryption exponents are considered with same RSA modulus N. A decade back, Howgrave-Graham and Seifert (CQRE 1999) studied this problem in detail and presented the bounds on the decryption exponents for which RSA is weak. For the case of two decryption exponents, the bound was . We have exploited a different lattice based technique to show that RSA is weak beyond this bound. Our analysis provides improved results and it shows that for two exponents, RSA is weak when the RSA decryption exponents are less than . Moreover, we get further improvement in the bound when some of the most significant bits (MSBs) of the decryption exponents are same (but unknown).
Journal | Data powered by TypesetInformation Processing Letters |
---|---|
Publisher | Data powered by TypesetElsevier BV |
Open Access | No |