In this paper, we study the problem of factoring an RSA modulus N = pq in polynomial time, when p is a weak prime, that is, p can be expressed as ap = u0 +M1u1 +... + Mkuk for some k integers M1,...,Mk and k+2 suitably small parameters a, u0,... uk. We further compute a lower bound for the set of weak moduli, that is, moduli made of at least one weak prime, in the interval [22n, 22(n+1)] and show that this number is much larger than the set of RSA prime factors satisfying Coppersmith’s conditions, effectively extending the likelihood for factoring RSA moduli. We also prolong our findings to moduli composed of two weak primes.
CITATION STYLE
Nitaj, A., & Rachidi, T. (2015). Factoring RSA moduli with weak prime factors. In Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics) (Vol. 9084, pp. 361–374). Springer Verlag. https://doi.org/10.1007/978-3-319-18681-8_29
Mendeley helps you to discover research relevant for your work.