Abstract
An important attack on multi-power RSA (N = prq) was introduced by Sarkar in 2014, by extending the small private exponent attack of Boneh and Durfee on classical RSA. In particular, he showed that N can be factored efficiently for r = 2 with private exponent d satisfying d < N0.395. In this paper, we generalize this work by introducing a new partial key exposure attack for finding small roots of polynomials using Coppersmith’s algorithm and Gröbner basis computation. Our attack works for all multi-power RSA exponents e (resp. d) when the exponent d (resp. e) has full size bit length. The attack requires prior knowledge of least significant bits (LSBs), and has the property that the required known part of LSB becomes smaller in the size of e. For practical validation of our attack, we demonstrate several computer algebra experiments.
Original language | English |
---|---|
Title of host publication | Algebraic Informatics |
Subtitle of host publication | 6th International Conference, CAI 2015 Stuttgart, Germany, September 1–4, 2015 Proceedings |
Editors | Andreas Maletti |
Place of Publication | Cham Switzerland |
Publisher | Springer |
Pages | 103-114 |
Number of pages | 12 |
ISBN (Print) | 9783319230207 |
DOIs | |
Publication status | Published - 2015 |
Externally published | Yes |
Event | International Conference on Algebraic Informatics 2015 - Stuttgart, Germany Duration: 1 Sept 2015 → 4 Sept 2015 Conference number: 6th https://www.springer.com/gp/book/9783319230207 (Proceedings) https://easychair.org/conferences/?conf=cai2015 (Conference website) |
Publication series
Name | Lecture Notes in Computer Science |
---|---|
Publisher | Springer |
Volume | 9270 |
ISSN (Print) | 0302-9743 |
ISSN (Electronic) | 1611-3349 |
Conference
Conference | International Conference on Algebraic Informatics 2015 |
---|---|
Abbreviated title | CAI 2015 |
Country/Territory | Germany |
City | Stuttgart |
Period | 1/09/15 → 4/09/15 |
Internet address |
|
Keywords
- Coppersmith’s method
- Integer factorization
- Multi-power RSA
- Partial key exposure
- Small roots of polynomials