Is there such an algorithm that would allow to upgrade the encryption of an RSA-encrypted message without revealing the plaintext to the untrusted user?
Basically, such an algorithm would probably be split in two parts.
- The algorithm would take the old private key and the new public key and generate a sort of intermediate key.
- The key would then be distributed to untrusted parties who could upgrade their encrypted messages to the new keypair using the intermediate key and (maybe) the new public key.
Neither the old private key nor the new private key should not be easily recoverable (computationaly infeasible) from the intermediate key, so untrusted parties wouldn't be able to recover the plaintext.
Now I suppose that such a scheme does not exist, because I don't see a real use case for it, but it would be interesting to know if such a thing can be done.