Factoring RSA moduli with weak prime factors - Normandie Université Access content directly
Conference Papers Year : 2015

Factoring RSA moduli with weak prime factors


In this paper, we study the problem of factoring an RSA modulus N = pq in polynomial time, when p is a weak prime, that is, p can be expressed as ap = u0 + M1u1 +. .. + M k u k for some k integers M1,. .. , M k and k + 2 suitably small parameters a, u0,. .. u k. We further compute a lower bound for the set of weak moduli, that is, moduli made of at least one weak prime, in the interval [2^(2n) , 2 ^(2(n+1)) ] and show that this number is much larger than the set of RSA prime factors satisfying Coppersmith's conditions, effectively extending the likelihood for factoring RSA moduli. We also prolong our findings to moduli composed of two weak primes.
Fichier principal
Vignette du fichier
rsa28final.pdf (357.84 Ko) Télécharger le fichier
Origin : Files produced by the author(s)

Dates and versions

hal-02320968 , version 1 (20-10-2019)



Abderrahmane Nitaj, Tajjeeddine Rachidi. Factoring RSA moduli with weak prime factors. First International Conference of Codes, Cryptology, and Information Security, 2015, Rabat, Morocco. pp. 361-374, ⟨10.1007/978-3-319-18681-8_29⟩. ⟨hal-02320968⟩
134 View
430 Download



Gmail Facebook X LinkedIn More