私钥p,q共享低位比特RSA体制的小指数攻击

The Attack on RSA with Small Private Key and Primes Sharing Least-Significant Bits

本文研究了组成RSA模数的两个素数p和q其低位比特相同,RSA公开密钥密码系统的安全性。其结果表明若RSA模数的两个素因子p和q共享低位比特,则当私钥d较小时这样的体制相对于模数不平衡的RSA更易受到攻击。本文的研究结果表明,当组成RSA模数的两个素数p和q仅有少量比特不相同时,使用规模较小的私钥d必须十分慎重。

In this paper, the security of RSA system is studied if the private keys p and q share their least significant bits. The result shows that RSA system is more vulnerable in this condition when the private key d is small, So it should be careful to void this kind of weak key.