2015
DOI: 10.1007/978-3-319-16745-9
|View full text |Cite
|
Sign up to set email alerts
|

Information Security and Cryptology

Abstract: Abstract.Recently, Nitaj and Douh presented a new attack on RSA with a composed decryption exponent. To be specific, they assumed that the decryption exponent in RSA is of the form d = Md1 + d0 where M is a known positive integer and d0 and d1 are two suitably small unknown integers. They gave a lattice-based decryption exponent recovery attack on this kind of RSA when the exponent d is under a larger bound than the well-known one N 0.292 given by Boneh and Durfee. In this paper, we reconsider the same problem… Show more

Help me understand this report

Search citation statements

Order By: Relevance

Paper Sections

Select...

Citation Types

0
0
0

Year Published

2021
2021
2024
2024

Publication Types

Select...
1
1

Relationship

0
2

Authors

Journals

citations
Cited by 2 publications
references
References 1 publication
0
0
0
Order By: Relevance