Name
Abstract | ||
|---|---|---|
In RSA public-key cryptosystem, a small private key is often preferred for efficiency but such a small key could degrade security. Thus the Chinese Remainder Theorem (CRT) is tactically used, especially in time-critical applications like smart cards. As for using the CRT in RSA, care must be taken to resist partial key exposure attacks. While it is common to choose two distinct primes with similar size in RSA, May has shown that a composite modulus N can be factored in the balanced RSA with the CRT of half of the least (or most) significant bits of a private key is revealed with a small public key. However, in the case that efficiency is more critical than security, such as smart cards, unbalanced primes might be chosen. Thus, we are interested in partial key exposure attacks to the unbalanced RSA with the CRT. In this paper, we obtain the similar results as the balanced RSA. We show that in the unbalanced RSA if the N-1/4 least (or most) significant bits are revealed, a private key can be recovered in polynomial time under a small public key. |
Year | DOI | Venue |
|---|---|---|
2006 | 10.1093/ietfec/e89-a.2.626 | IEICE TRANSACTIONS ON FUNDAMENTALS OF ELECTRONICS COMMUNICATIONS AND COMPUTER SCIENCES |
Keywords | Field | DocType |
CRT, unbalanced primes, Coppersmith's theorem, partial key exposure attacks | Chinese remainder theorem,Computer security,Smart card,Cryptosystem,Basic research,Time complexity,Public-key cryptography,Mathematics | Journal |
Volume | Issue | ISSN |
E89A | 2 | 0916-8508 |
Citations | PageRank | References |
0 | 0.34 | 0 |
Authors | ||
3 | ||
Name | Order | Citations | PageRank |
|---|---|---|---|
| Hee Jung Lee | 1 | 7 | 1.67 |
| Young-Ho Park | 2 | 137 | 16.79 |
| Taekyoung Kwon | 3 | 1894 | 153.24 |