On Using RSA with Low Exponent in a Public Key Network

  • Authors:
  • Johan Håstad

  • Affiliations:
  • -

  • Venue:
  • CRYPTO '85 Advances in Cryptology
  • Year:
  • 1985

Quantified Score

Hi-index 0.00

Visualization

Abstract

We consider the problem of solving systems of equations Pi(x) 驴 0 (mod ni) i = 1... k where Pi are polynomials of degree d and the ni are distinct relatively prime numbers and x ni. We prove that if k d(d+1)/2 we can recover x in polynomial time provided ni 驴 2k. This shows that RSA with low exponent is not a good alternative to use as a public key cryptosystem in a large network. It also shows that a protocol by Broder and Dolev [4] is insecure if RSA with low exponent is used.