Factoring N = prq for Large r

  • Authors:
  • Dan Boneh;Glenn Durfee;Nick Howgrave-Graham

  • Affiliations:
  • -;-;-

  • Venue:
  • CRYPTO '99 Proceedings of the 19th Annual International Cryptology Conference on Advances in Cryptology
  • Year:
  • 1999

Quantified Score

Hi-index 0.00

Visualization

Abstract

We present an algorithm for factoring integers of the form N = prq for large r. Such integers were previously proposed for various cryptographic applications. When r ≅ log p our algorithm runs in polynomial time (in log N). Hence, we obtain a new class of integers that can be efficiently factored. When r ≅ log p the algorithm is asymptotically faster than the Elliptic Curve Method. Our results suggest that integers of the form N = prq should be used with care. This is especially true when r is large, namely r greater than √log p.