# Tag Info

1 vote

### Fault attack on RSA-CRT

A little late, but for anyone else interested: There is an even easier way to recover $p$ if you know both a correct signature $S$ and a faulty signature $\hat{S}$. Assume - without loss of generality ...

### Create RSA Public/Private Keys with OID rsassaPss

Per Dave's comment, switch rsa to pkey and the OID is preserved in the public key. ...

### Universal Dynamic Accumulators : all parties know keys p and q. Is the original set needed to validate set membership and non membership?

As a general rule of thumb: In RSA, everyone with the factorization p and q can do everything, except calculating dlogs. If you spread that knowledge over multiple parties, you can skip RSA entirely: ...
• 12.3k
Accepted

### Validating an RSA public key

Given a pair of integers $(n,e)$, we can quickly decide that it is not a valid RSA key (mathematically, or in the sense of conforming to the de-facto standard PKCS#1, or in the sense of providing ...
• 126k

### Validating an RSA public key

Well, for $e$, you can certainly test if $e$ is an odd number greater than 1; any such $e$ is a possible public exponent, and and it is infeasible to determine if $\gcd( e, \phi(n)) > 1$, and so ...
• 135k

### Are the structures (groups/rings) that RSA operations are performed on actually R-modules?

Most students starting in cryptography either have a computer science background or a mathematics background. In either case, the students are at a fairly basic level. Computer science students ...
• 4,467

### Are the structures (groups/rings) that RSA operations are performed on actually R-modules?

Beside what's in these other two answers, a reason not to study RSA in the question's way is that it tends to lead to a definition restricted to plaintext in $\mathbb Z_N^*$, rather than plaintext in ...
• 126k

### Are the structures (groups/rings) that RSA operations are performed on actually R-modules?

Or maybe the concept of modules is usually not known by students entering cryptography? I believe this is more likely; modules are a rather arcane subject, and one which even people decently educated ...
• 135k

### Why RSA uses {d,n} as private key instead of {e,n}?

Note: This answer was written for the question "In RSA, are $e$ and $d$ technically equivalent?", that was migrated from security-SE, then merged here. The relevant parts of that other ...
• 126k