# Fault encryption attack on RSA [duplicate]

How to recover plaintext, if we know public key(RSA), correctly encrypted text and text encrypted with faulty public key, where one bit is changed?

• Do we have any information about what bit is changed, in particular if it lies in the public exponent, or the public modulus?
– fgrieu
Mar 10 '15 at 17:11
• @fgrieu, if the variation holds on a single bit of exponent, letting public modulus inchanged, the recovering the input message can be simplifyed. Observe $\frac{C^{'}}{C}=m^{e^{'}-e} \; mod \; N$ gives precious informations. Mar 10 '15 at 20:19