Skip to main content
Cryptography

Return to Question

changed notation
Source Link
DeLorean88
DeLorean88
  • 155
  • 4

Suppose Bob has $N>1$$k>1$ RSA public keys $e_i$$(e_i, n_i)$ without any knowledge of their corresponding private keys. Alice also has all the public keys, but also has a private key for only one of them, say, $d_q$$(d_j, n_j)$. Is it possible for her to prove to Bob that she has at least one of the private keys, without revealing $q$?$j$

EDIT: changed notation according to fgrieu suggestions

Suppose Bob has $N>1$ RSA public keys $e_i$ without any knowledge of their corresponding private keys. Alice has a private key for only one of them, say, $d_q$. Is it possible for her to prove to Bob that she has at least one of the private keys, without revealing $q$?

Suppose Bob has $k>1$ RSA public keys $(e_i, n_i)$ without any knowledge of their corresponding private keys. Alice also has all the public keys, but also has a private key for only one of them, say, $(d_j, n_j)$. Is it possible for her to prove to Bob that she has at least one of the private keys, without revealing $j$

EDIT: changed notation according to fgrieu suggestions

clarity
Source Link
DeLorean88
DeLorean88
  • 155
  • 4

Suppose Bob has $N$$N>1$ RSA public keys $e_i$ without any knowledge of their corresponding private keys. Alice has a private key for only one of them, say, $d_q$. Is it possible for her to prove to Bob that she has at least one of the private keykeys, without revealing $q$?

Suppose Bob has $N$ RSA public keys $e_i$ without any knowledge of their corresponding private keys. Alice has a private key for only one of them, say, $d_q$. Is it possible for her to prove to Bob that she has the private key, without revealing $q$?

Suppose Bob has $N>1$ RSA public keys $e_i$ without any knowledge of their corresponding private keys. Alice has a private key for only one of them, say, $d_q$. Is it possible for her to prove to Bob that she has at least one of the private keys, without revealing $q$?

Source Link
DeLorean88
DeLorean88
  • 155
  • 4

Zero knowledge RSA public key

Suppose Bob has $N$ RSA public keys $e_i$ without any knowledge of their corresponding private keys. Alice has a private key for only one of them, say, $d_q$. Is it possible for her to prove to Bob that she has the private key, without revealing $q$?