Cryptanalysis of RSA Variants with Primes Sharing Most Significant Bits

Publication Name

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Abstract

We consider four variants of the RSA cryptosystem with an RSA modulus N= pq where the public exponent e and the private exponent d satisfy an equation of the form ed- k(p2- 1 ) (q2- 1 ) = 1. We show that, if the prime numbers p and q share most significant bits, that is, if the prime difference | p- q| is sufficiently small, then one can solve the equation for larger values of d, and factor the RSA modulus, which makes the systems insecure.

Open Access Status

This publication may be available as open access

Volume

13118 LNCS

First Page

42

Last Page

53

Share

COinS
 

Link to publisher version (DOI)

http://dx.doi.org/10.1007/978-3-030-91356-4_3