Timeline for If we have multiple unique RSA signed messages produced from the same private key, can we always find new valid signatures?
Current License: CC BY-SA 4.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 15, 2020 at 14:21 | comment | added | tylo | @scribe: Not evil. It just shows how bad it is, if not done properly. | |
| Dec 15, 2020 at 9:16 | vote | accept | scribe | ||
| Dec 15, 2020 at 9:15 | comment | added | scribe | Welp, that is just straight evil! | |
| Dec 15, 2020 at 9:12 | comment | added | fgrieu♦ | @scribe: pick any integer $s\in[0,n)$, say $s=42$ or $s=\lfloor n/\pi\rfloor$. Compute $m=s^e\bmod n$. Here we are, $(m,s)$ is a valid (message, signature) pair for textbook RSA signature. | |
| Dec 15, 2020 at 8:57 | history | edited | fgrieu♦ | CC BY-SA 4.0 |
Polish
|
| Dec 15, 2020 at 8:34 | history | edited | fgrieu♦ | CC BY-SA 4.0 |
Polish
|
| Dec 15, 2020 at 8:27 | history | answered | fgrieu♦ | CC BY-SA 4.0 |