Security impact of signing small data using RSA

Question

I have an application which consists of a client and a server. Both have a pair of public and private key (RSA). For communication, both sign their messages and send them to the other part. So a message Looks like this:

_____________________
| HTTP Post request |
|___________________|
|     Post data     |
|___________________|
|     Signature     |
|___________________|

The post data is signed with the private key and the signature is added to the data. Sometimes the post data is very small (sometimes it just contains one number).

I know it can impact performance very much if I sign every little piece of data, but this time I'm not concerned too much about performance as the frequency of signing is very low.

Can it cause security problems if I sign very small amount of data such as just one number?

Answer 1

If you are using a secure signature algorithm, padding and all, then it must be secure for messages of any length. So in that sense you are good.

However, in many protocols your messages must include something to prevent replay attacks, like an incrementing counter, in which case you shouldn't be signing just a single number if the messages are meant to say anything at all.

Answer 2

If you were not padding your message properly, and just signing the message by raising it the power of d you would actually be introducing a potential signature forgery vulnerability. If you were padding properly, or performing the method where you hash the message, and have the specific header, there would be no vulnerability.

The vulnerability on plain RSA is as follows: $s_1$ is the signature of $m_1$ , and $s_2$ is the signature of $m_2$. Since this is plain RSA, $s_i = {m_i}^{d}$, if you multiply $s_1$ and $s_2$ together, you get the signature of $m_1 * m_2$, since

$$s_1 * s_2 = ({m_1}^{d})({m_2}^{d}) = (m_1 m_2)^d$$

You can thus get the signature of any number that only has m_1, and m_2 as its factors. So with the signature of 2,3,5,7 an attacker could forge the signature of any 7-Smooth number. (A number which can be completely factored into a product of primes <= 7)

The more messages they receive, the more messages they can forge.

Thus use a proper padding scheme, or proper signing algorithm :)