Skip to main content
Post Undeleted by ckamath
added 459 characters in body
Source Link
ckamath
  • 5.5k
  • 2
  • 24
  • 42

The RSA problem, which is what you describe, is not known to be equivalent to factoring and there is some evidence both ways. In [BV] it is shown that this barrier ismight be inherent. It is shown in [BV] (using: using a black-box separation technique called metareductions) that any "algebraic" blackmeta-boxreductions straight-line reduction from factoring to the RSA problem can turned into a factoring algorithm, they show that certain restricted class of reductions are not possible. On the other hand, it was shown later in [AM] that in the generic ring model (see [JS]), these problems are equivalent. That is, any speed-up in breaking RSA has to exploit the representation of $\mathbb{Z}_N^*$.

You can read about more related works in §1.3 in [AM].

[BV]: Boneh and Venkateshan, Breaking RSA may not be equivalent to factoring, Eurocrypt'98

[AM]: Aggarwal and Maurer, Breaking RSA Generically Is Equivalent to Factoring, Eurocrypt'09

[JS]: Jager and Schwenk, On the Analysis of Cryptographic Assumptions in theGeneric Ring Model, Asiacrypt'09

The RSA problem, which is what you describe, is not known to be equivalent to factoring and there is some evidence [BV] that this barrier is inherent. It is shown in [BV] (using a black-box separation technique called metareductions) that any "algebraic" black-box straight-line reduction from factoring to the RSA problem can turned into a factoring algorithm. On the other hand, it was shown in [AM] that in the generic ring model,

[BV]: Boneh and Venkateshan, Breaking RSA may not be equivalent to factoring, Eurocrypt'98

[AM]: Aggarwal and Maurer, Breaking RSA Generically Is Equivalent to Factoring, Eurocrypt'09

The RSA problem, which you describe, is not known to be equivalent to factoring and there is evidence both ways. In [BV] it is shown that this barrier might be inherent: using a black-box separation technique called meta-reductions, they show that certain restricted class of reductions are not possible. On the other hand, it was shown later in [AM] that in the generic ring model (see [JS]), these problems are equivalent. That is, any speed-up in breaking RSA has to exploit the representation of $\mathbb{Z}_N^*$.

You can read about more related works in §1.3 in [AM].

[BV]: Boneh and Venkateshan, Breaking RSA may not be equivalent to factoring, Eurocrypt'98

[AM]: Aggarwal and Maurer, Breaking RSA Generically Is Equivalent to Factoring, Eurocrypt'09

[JS]: Jager and Schwenk, On the Analysis of Cryptographic Assumptions in theGeneric Ring Model, Asiacrypt'09

Post Deleted by ckamath
added 459 characters in body
Source Link
ckamath
  • 5.5k
  • 2
  • 24
  • 42

The RSA problem, which is what you describe, is not known to be equivalent to factoring and there is some evidence [BV] that this barrier is inherent. It is shown in [BV] (using a black-box separation technique called metareductions) that any "algebraic" black-box straight-line reduction from factoring to the RSA problem can turned into a factoring algorithm. On the other hand, it was shown in [AM] that in the generic ring model,

[BV]: Boneh and Venkateshan., Breaking RSA may not be equivalent to factoring, Eurocrypt'98.

[AM]: Aggarwal and Maurer, Breaking RSA Generically Is Equivalent to Factoring, Eurocrypt'09

The RSA problem, which is what you describe, is not known to be equivalent to factoring and there is some evidence [BV] that this barrier is inherent.

[BV]: Boneh and Venkateshan. Breaking RSA may not be equivalent to factoring, Eurocrypt'98.

The RSA problem, which is what you describe, is not known to be equivalent to factoring and there is some evidence [BV] that this barrier is inherent. It is shown in [BV] (using a black-box separation technique called metareductions) that any "algebraic" black-box straight-line reduction from factoring to the RSA problem can turned into a factoring algorithm. On the other hand, it was shown in [AM] that in the generic ring model,

[BV]: Boneh and Venkateshan, Breaking RSA may not be equivalent to factoring, Eurocrypt'98

[AM]: Aggarwal and Maurer, Breaking RSA Generically Is Equivalent to Factoring, Eurocrypt'09

Source Link
ckamath
  • 5.5k
  • 2
  • 24
  • 42

The RSA problem, which is what you describe, is not known to be equivalent to factoring and there is some evidence [BV] that this barrier is inherent.

[BV]: Boneh and Venkateshan. Breaking RSA may not be equivalent to factoring, Eurocrypt'98.