13 reputation
2
bio website
location
age
visits member for 1 year, 3 months
seen Apr 20 '13 at 18:04

Apr
20
comment How to learn the first bit of m in padded RSA
I forget the CCA! thank you very much!
Apr
19
comment How to learn the first bit of m in padded RSA
Thank you. I think (0^k||r||00000000) is like a head tag of any message, so when I decrypt m', the head is fixed. I think 2^e c modN=(2m')^e mod N, but I don't know what the connect with m.