Suppose your private key $d_1$ has been exposed. Instead of changing $p$ and $q$, instead you just choose a new public and private key (say $e_2$ and $d_2$) and use these instead. What kinds of attacks could someone perform knowing $N,e_1,e_2,d_1$ (where $e_1$ is the first public key)?
- Anybody can ask a question
- Anybody can answer
- The best answers are voted up and rise to the top
If you know even a single key pair $(e,d)$, then you can factor $N$, so that's pretty much the ultimate attack — efficient, total key recovery. For a short, digestible proof of this, see the last fact on page three of Dan Boneh's Twenty Years of Attacks on the RSA Cryptosystem.