对环Z_nZ上圆锥曲线RSA型公钥密码体系的小私钥d攻击.pdfVIP

40 2 四川大 学 学 报 ( 工程 科 学版 ) V o.l 40 N o. 2 2008 3 JOU RNA L O F S ICHUA N U N IV ER S ITY ( EN G IN EER ING SC IENCE ED IT ION ) M ar. 2008 1009-30 87 ( 2008) 02-0086-05 Z /nZ RSA d 刘 铎, 戴 一奇 ( , 100084) Z / nZ R SA , d n, Z / nZ RSA , d , Z / nZ RSA ; ; ; TP391; TN 918 A Short P rivate Exponent A ttack s on RSA- type C ryptosystem Based on Conic Cu rves LIUD uo, DA I Yi-qi ( D ept. of C om puter S c.i and T echno .l , T s inghua U n iv. , B eijing 100084, Ch ina) Abstract: T o d iscu ss the security o f R SA- typ e cryptosystem over con ic curves on the ring Z /nZ, tw o algorithm s o f short private exponen t a ttack on su ch cryptosystem s w ere presen ted. Tw o smi p le exam ples illum inating the algo- rithm s w ere also g iven. The results show ed that the RSA-type cryptosystem over con ic curves on the ring Z /nZ can not resist short private exponent attack. In other wo rd, the p aram eter n can be factored in po lynom ia l tmi e o f lnn if the private exponent is too sm al.l K ey w ord s: cryptology; conic curve; short private exponent attack s; cont inu e fraction [ 6] 20 90 GF (p ) ; n GF ( 2 ) ; [ 1- 2] [ 7] : , , Z /nZ [ 8-