5
$\begingroup$

I'm not sure what this attack model is called - it's not known-plaintext and also not quite cipher-text-only. It is similar to this question except the general case (not just two keys) and using keys you'd find in the wild.

Say you have one hundred ciphertexts which you know are the result of encrypting exactly the same plaintext with one hundred different public keys. Is there any vulnerability here in terms of figuring out what the plaintext is or what the private keys are, either using an RSA-based system or an elliptic curve-based system?

If there is, what would some valid approaches be to preventing the attack? I'm thinking along the lines of the first four bytes being a seed to a PRNG which modify the remaining bytes in some way so that the plaintexts end up being quite different. I suppose something like OAEP should be enough?

Improve this question
$\endgroup$
1

1 Answer 1

Reset to default
1
$\begingroup$

RSA is vulnerable to this attack if an insecure padding scheme is used. Still unsure about elliptic curve cryptography.

Improve this answer
$\endgroup$
1
  • 1
    $\begingroup$ The "ECC" part is unanswerable without you specifying how precisely you use ECC. Usually we don't encrypt any data with ECC at all, we use it to generate a shared key which is then used to encrypt data. $\endgroup$
    – CodesInChaos
    Commented Apr 27, 2014 at 13:17

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.