Abstract
Let $$N_{1} = p_{1}q_{1}$$ and $$N_{2} = p_{2}q_{2}$$ be two RSA moduli, not necessarily of the same bit-size. In 2009, May and Ritzenhofen proposed a method to factor $$N_{1}$$ and $$N_{2}$$ given the implicit information that $$p_{1}$$ and $$p_{2}$$ share an amount of least significant bits. In this paper, we propose a generalization of their attack as follows: suppose that some unknown multiples $$a_{1}p_{1}$$ and $$a_{2}p_{2}$$ of the prime factors $$p_{1}$$ and $$p_{2}$$ share an amount of their Most Significant Bits (MSBs) or an amount of their Least Significant Bits (LSBs). Using a method based on the continued fraction algorithm, we propose a method that leads to the factorization of $$N_{1}$$ and $$N_{2}$$ . Using simultaneous diophantine approximations and lattice reduction, we extend the method to factor $$k\ge 3$$ RSA moduli $$N_{i}=p_{i}q_{i}, i=1,\ldots ,k$$ given the implicit information that there exist unknown multiples $$a_{1}p_{1}, \ldots , a_kp_k$$ sharing an amount of their MSBs or their LSBs. Also, this paper extends many previous works where similar results were obtained when the $$p_{i}$$ ’s share their MSBs or their LSBs.
Talk to us
Join us for a 30 min session where you can share your feedback and ask us any queries you have
Disclaimer: All third-party content on this website/platform is and will remain the property of their respective owners and is provided on "as is" basis without any warranties, express or implied. Use of third-party content does not indicate any affiliation, sponsorship with or endorsement by them. Any references to third-party content is to identify the corresponding services and shall be considered fair use under The CopyrightLaw.