The Security of Individual RSA Bits

  • Authors:
  • Johan Håstad;Mats Näslund

  • Affiliations:
  • -;-

  • Venue:
  • FOCS '98 Proceedings of the 39th Annual Symposium on Foundations of Computer Science
  • Year:
  • 1998

Quantified Score

Hi-index 0.00

Visualization

Abstract

We study the security of individual bits in an RSA encrypted message $E_N(x)$. We show that given $E_N(x)$, predicting any single bit in $x$ with only a non-negligible advantage over the trivial guessing strategy, is (through a polynomial time reduction) as hard as breaking RSA. We briefly discuss a related result for bit security of the discrete logarithm.