New answers tagged

1 vote

Fault attack on RSA-CRT

A little late, but for anyone else interested: There is an even easier way to recover $p$ if you know both a correct signature $S$ and a faulty signature $\hat{S}$. Assume - without loss of generality ...
0 votes

Create RSA Public/Private Keys with OID rsassaPss

Per Dave's comment, switch rsa to pkey and the OID is preserved in the public key. ...
0 votes

Universal Dynamic Accumulators : all parties know keys p and q. Is the original set needed to validate set membership and non membership?

As a general rule of thumb: In RSA, everyone with the factorization p and q can do everything, except calculating dlogs. If you spread that knowledge over multiple parties, you can skip RSA entirely: ...
  • 12.3k
12 votes
Accepted

Validating an RSA public key

Given a pair of integers $(n,e)$, we can quickly decide that it is not a valid RSA key (mathematically, or in the sense of conforming to the de-facto standard PKCS#1, or in the sense of providing ...
  • 126k
5 votes

Validating an RSA public key

Well, for $e$, you can certainly test if $e$ is an odd number greater than 1; any such $e$ is a possible public exponent, and and it is infeasible to determine if $\gcd( e, \phi(n)) > 1$, and so ...
  • 135k
3 votes

Are the structures (groups/rings) that RSA operations are performed on actually R-modules?

Most students starting in cryptography either have a computer science background or a mathematics background. In either case, the students are at a fairly basic level. Computer science students ...
  • 4,467
3 votes

Are the structures (groups/rings) that RSA operations are performed on actually R-modules?

Beside what's in these other two answers, a reason not to study RSA in the question's way is that it tends to lead to a definition restricted to plaintext in $\mathbb Z_N^*$, rather than plaintext in ...
  • 126k
4 votes

Are the structures (groups/rings) that RSA operations are performed on actually R-modules?

Or maybe the concept of modules is usually not known by students entering cryptography? I believe this is more likely; modules are a rather arcane subject, and one which even people decently educated ...
  • 135k
5 votes

Why RSA uses {d,n} as private key instead of {e,n}?

Note: This answer was written for the question "In RSA, are $e$ and $d$ technically equivalent?", that was migrated from security-SE, then merged here. The relevant parts of that other ...
  • 126k
0 votes

Is it ok to create secret by signing known data (string) with RSA private key?

RSA is a public-key cryptosystem. This means that you publish your public key in order for people to encrypt and you use your private key in order to decrypt. When signing a message, you create extra ...
1 vote

Finding d of RSA given e and phi using SageMath

This is about the XGCD implementation of Sagemath. XGCD(a, b) Return a triple (g,s,t) such that g=s⋅a+t⋅b=gcd(a,b). g, s, t - such that g=s⋅a+t⋅b Note There is no guarantee that the returned ...
  • 44.3k

Top 50 recent answers are included