RUS  ENG
Full version
JOURNALS // Matematicheskie Voprosy Kriptografii [Mathematical Aspects of Cryptography] // Archive

Mat. Vopr. Kriptogr., 2013 Volume 4, Issue 3, Pages 7–19 (Mi mvk90)

On a generalization of the Dujella method

K. D. Zhukov

TPA Laboratory, Moscow

Abstract: As a rule, large secret exponents are used in practical realizations of RSA cryptosystem with modulus $N=pq$. Nevertheless, there are many theoretical results on the cryptanalysis of RSA system with a small secret exponent. A method suggested by Dujella recovers secret exponents $d<DN^{0.25}$ with a run-time complexity $O(D\ln D)$ and space complexity $O(D)$. Weger have suggested an attack on the secret exponents $d<\frac{N^{0.75}}{p-q}$. We describe a generalization of the Dujella method to attack the exponents $d<D\frac{N^{0.75}}{p-q}$ with run-time complexity $O(D\ln D)$ and space complexity $O(D)$.

Key words: RSA cryptosystem, Diophantine approximations, meet-in-the-middle attack.

UDC: 511.53+519.719.2

Received 20.IV.2012

DOI: 10.4213/mvk90



© Steklov Math. Inst. of RAS, 2024