对RSA-型密码体制的格基约化攻击

Lattice -based Attack Against RSA-type Cryptosystems

D.Boneh和G.Durfee在文献1中指出:当保密指数d<N0.292时RSA密码体制是不安全的。这是对Wiener的结果2的第一次改进。在研究中发现:这种攻击可以扩展到其模p的阶非常接近p的群上。例如,以椭圆曲线和LUC系统为基础的密码体制。

D.Boneh and G.Durfee showed that the RSA cryptosystem has a weakness if the pri-vate exponent d is less than N 0.292 .This is the first improvement over a n old result of Wienershowing that when d <N 0.25 RSA is insecure.In this paper we obse rve that the attack extends to other s ystems based on groups whose order modulo p i s very close to p.For example,system s based on elliptic curves and the LUC system.