Header menu link for other important links
X
Factoring RSA Modulus Using Prime Reconstruction from Random Known Bits
Maitra Subhamoy, , Sen Gupta Sourav
Published in Springer Berlin Heidelberg
2010
Pages: 82 - 99
Abstract

This paper discusses the factorization of the RSA modulus N (i.e., N = pq, where p, q are primes of same bit size) by reconstructing the primes from randomly known bits. The reconstruction method is a modified brute-force search exploiting the known bits to prune wrong branches of the search tree, thereby reducing the total search space towards possible factorization. Here we revisit the work of Heninger and Shacham in Crypto 2009 and provide a combinatorial model for the search where some random bits of the primes are known. This shows how one can factorize N given the knowledge of random bits in the least significant halves of the primes. We also explain a lattice based strategy in this direction. More importantly, we study how N can be factored given the knowledge of some blocks of bits in the most significant halves of the primes. We present improved theoretical result and experimental evidences in this direction.

About the journal
JournalData powered by TypesetProgress in Cryptology
PublisherData powered by TypesetSpringer Berlin Heidelberg
Open AccessNo