Header menu link for other important links
X
Cryptanalysis of RSA with two decryption exponents
, Maitra Subhamoy
Published in Elsevier BV
2010
Volume: 110
   
Issue: 5
Pages: 178 - 181
Abstract

In this paper, we consider RSA with , where are of same bit size, i.e., . We study the weaknesses of RSA when multiple encryption and decryption exponents are considered with same RSA modulus N. A decade back, Howgrave-Graham and Seifert (CQRE 1999) studied this problem in detail and presented the bounds on the decryption exponents for which RSA is weak. For the case of two decryption exponents, the bound was . We have exploited a different lattice based technique to show that RSA is weak beyond this bound. Our analysis provides improved results and it shows that for two exponents, RSA is weak when the RSA decryption exponents are less than . Moreover, we get further improvement in the bound when some of the most significant bits (MSBs) of the decryption exponents are same (but unknown).

About the journal
JournalData powered by TypesetInformation Processing Letters
PublisherData powered by TypesetElsevier BV
Open AccessNo