Tag Info

Hot answers tagged

9

Actually, that was proposed here back in 1998 (sorry, an electronic version of the paper does not appear to be on the web) -- the author claimed a modest speedup in the private operations. However, that speed up would appear to be about the same if you just did "multiprime RSA", that is, selected an RSA modulus of the form $pqr$ for three distinct primes ...


6

A possible RSA variant uses: some odd exponent $e>2$ (that can be $e=3$ or $e=2^{16}+1$ as customary in standard RSA); $p$ and $q$ distinct large random primes, with $\gcd(e,p)=\gcd(e,p-1)=\gcd(e,q-1)=1$; $N=p^2\cdot q$; some $d$ computed such that $d\cdot e\equiv 1\pmod{\operatorname{lcm}(p,p-1,q-1)}$; public-key function $x\to x^e\bmod N$; private-key ...


4

Rather than making an overly long question even longer, I post this as an answer. As part of the update process of the French security recommendations linked in the question, I suggested (June 2013) a waiver for the requirement/recommendation that $e>2^{16}$ when using a padding scheme with a security proof. It was kindly refused (within 6 weeks), with ...


3

What happens if I choose $e=3$? Can I retrieve the message by simply calculating $\sqrt[3]{c}$? Yes, if the plaintext message is smaller than $\sqrt[3]{N}$, then yes, a simple computation of $\sqrt[3]{C}$ will recover the original message. Why can't I do that with bigger $e$'s? Actually, you could... as long as the plaintext message is smaller ...


2

In both cases (the company name and the algorithm name), the letters “RSA” stand for the initials of the surnames of Ron Rivest, Adi Shamir, and Leonard Adleman… $R$ivest, $S$hamir, and $A$dleman. Wrapping it up in short: In 1977, they (Ron Rivest, Adi Shamir, and Leonard Adleman) first publicly described an algorithm which was named after them and is ...


1

It would probably work: RSA with composite numbers But it would be better to just choose 2 larger primes instead of reusing the same prime twice.



Only top voted, non community-wiki answers of a minimum length are eligible