Cryptanalysis of the RSA Subgroup Assumption from TCC 2005 - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2011

Cryptanalysis of the RSA Subgroup Assumption from TCC 2005

Résumé

At TCC 2005, Groth underlined the usefulness of working in small RSA subgroups of hidden order. In assessing the security of the relevant hard problems, however, the best attack considered for a subgroup of size 22ℓ had a complexity of O(2ℓ). Accordingly, ℓ= 100 bits was suggested as a concrete parameter. This paper exhibits an attack with a complexity of roughly 2ℓ/2 operations, suggesting that Groth’s original choice of parameters was overly aggressive. It also discusses the practicality of this new attack and various implementation issues.

Dates et versions

hal-01110234 , version 1 (27-01-2015)

Identifiants

Citer

Jean-Sébastien Coron, Antoine Joux, Avradip Mandal, David Naccache, Mehdi Tibouchi. Cryptanalysis of the RSA Subgroup Assumption from TCC 2005. PKC 2011 - Proceedings of the 2011 International Conference on Practice and Theory in Public Key Cryptography, Mar 2011, Taormina, Italy. pp.147-155, ⟨10.1007/978-3-642-19379-8_9⟩. ⟨hal-01110234⟩
99 Consultations
0 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More