0
$\begingroup$

I have read several articles on the temporal attack against Montgomery multiplication to speedup RSA computations. However, I do not quite get the principle.

I understood that there is a additional reduction when performing Montgomery multiplication when the multiplication is greater than the modulus.

What I don't understand is how to choose the message sets. Or how to go from one key bit to another. And how many messages should be taken for each bit.

Edit : i'm still wondering on how we get the two sets of messages. The first set should not include a reduction in contrary to the second set. How can we know if there is a reduction or not ?

Improve this question
$\endgroup$
5
  • 1
    $\begingroup$ Have you seen this question yet? $\endgroup$
    – Mark Schultz-Wu ♦
    Commented May 10, 2020 at 3:44
  • $\begingroup$ Please indicate if you did. Your question could be closed as a duplicate if you don't. As it stands, it is unclear what part you don't get. There are 3 questions (I had to remove the "how to attack a little" because that's not really a good question). If you read the other answer, then where are you stuck? $\endgroup$
    – Maarten Bodewes ♦
    Commented May 10, 2020 at 15:22
  • $\begingroup$ Yes i do, i'm still wondering on how we get the two sets of messages. The first set should not include a reduction in contrary to the second set. How can we know if there is a reduction or not ? $\endgroup$
    – Black cryptographer
    Commented May 10, 2020 at 16:22
  • 1
    $\begingroup$ Does this answer your question? RSA Timing Attack on "Extra" Montgomery Reduction $\endgroup$
    – Yunus Karakaya
    Commented May 10, 2020 at 22:05
  • $\begingroup$ I read it several times, but i dont understand this part "plays all messages" in the first answer. $\endgroup$
    – Black cryptographer
    Commented May 11, 2020 at 0:58

0

Reset to default

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.