Certifying RSA

  • Authors:
  • Saqib A. Kakvi;Eike Kiltz;Alexander May

  • Affiliations:
  • Faculty of Mathematics, Horst-Görtz Institute for IT Security, Ruhr-University Bochum, Germany;Faculty of Mathematics, Horst-Görtz Institute for IT Security, Ruhr-University Bochum, Germany;Faculty of Mathematics, Horst-Görtz Institute for IT Security, Ruhr-University Bochum, Germany

  • Venue:
  • ASIACRYPT'12 Proceedings of the 18th international conference on The Theory and Application of Cryptology and Information Security
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

We propose an algorithm that, given an arbitrary N of unknown factorization and prime e ≥ N1/4+ε, certifies whether the RSA function RSAN,e(x) :=xe mod N defines a permutation over ℤ*N or not. The algorithm uses Coppersmith's method to find small solutions of polynomial equations and runs in time O(ε−8 log2N). Previous certification techniques required eN.