3
votes
Accepted
Zero-knowledge proof of knowledge of RSA decryption exponent
Your proposed protocol is, in fact, not zero-knowledge. For example, it can be used by an attacker as an RSA decryption oracle.
Now, with public $e$, the knowledge of $d$ and the knowledge of the ...
- 151k
Only top scored, non community-wiki answers of a minimum length are eligible