Skip to main content
edited tags
Link
Squeamish Ossifrage
  • 49.5k
  • 3
  • 118
  • 227
fix typo; use latex
Source Link
yyyyyyy
  • 12.2k
  • 4
  • 48
  • 68

I have been trying to understand the ROCKROCA attack described here as the "First Attack" and I cannot follow the explaination.

I have been trying to generate a 512-bits key and crack it. As far as I can understand, p$p$ and q$q$ are 65537^a mod L$65537^a \bmod L$ where a$a$ is random and L = 2357..P$L = 2\cdot3\cdot5\cdot7\cdot\dots$. If at one point, I find out what p$p$ or q$q$ is, than I can find the other one easily and then compute the private key.

Is this correct? I am sorry if I do not make any sense and any hint to the right solution is greatly appreciated.

I have been trying to understand the ROCK attack described here as the "First Attack" and I cannot follow the explaination.

I have been trying to generate a 512-bits key and crack it. As far as I can understand, p and q are 65537^a mod L where a is random and L = 2357..P. If at one point, I find out what p or q is, than I can find the other one easily and then compute the private key.

Is this correct? I am sorry if I do not make any sense and any hint to the right solution is greatly appreciated.

I have been trying to understand the ROCA attack described here as the "First Attack" and I cannot follow the explaination.

I have been trying to generate a 512-bits key and crack it. As far as I can understand, $p$ and $q$ are $65537^a \bmod L$ where $a$ is random and $L = 2\cdot3\cdot5\cdot7\cdot\dots$. If at one point, I find out what $p$ or $q$ is, than I can find the other one easily and then compute the private key.

Is this correct? I am sorry if I do not make any sense and any hint to the right solution is greatly appreciated.

Tweeted twitter.com/StackCrypto/status/941044791332220929
Source Link
John
  • 81
  • 2

How does the ROCA attack work?

I have been trying to understand the ROCK attack described here as the "First Attack" and I cannot follow the explaination.

I have been trying to generate a 512-bits key and crack it. As far as I can understand, p and q are 65537^a mod L where a is random and L = 2357..P. If at one point, I find out what p or q is, than I can find the other one easily and then compute the private key.

Is this correct? I am sorry if I do not make any sense and any hint to the right solution is greatly appreciated.