Abstract:In this paper, we gave a preliminary dynamical analysis on the RSA cryptosystem and obtained a computational formulae of the number of the fixed points of $k$ order of the RSA. Thus, the problem in [8, 9] has been solved.
What problem does this paper attempt to address?
This paper attempts to solve the problems regarding fixed points and their periodicity in the RSA encryption system, especially to quantitatively describe the number of fixed points of order \(k\). Specifically, the main contributions of the paper are as follows:
1. **Definition and Background**:
- The RSA encryption system is a public - key encryption algorithm, in which the encryption and decryption operations use the public key and the private key respectively.
- In the RSA system, if a message \(m\) satisfies \(m^e\equiv m\pmod{n}\), then \(m\) is called a fixed point.
- Further, if \(k\) is the smallest positive integer such that \(m^{ek}\equiv m\pmod{n}\), then \(m\) is called a fixed point of order \(k\).
2. **Problem Formulation**:
- Previous studies have pointed out that there are fixed points in the RSA system, and some literatures have attempted to conduct qualitative and quantitative analyses on these fixed points.
- In particular, Yu in [8, 9] considered the general case of fixed points of order \(k\) and pointed out that it is difficult to give an exact description of \(|T_{n,e,k}|\), where \(T_{n,e,k}\) is defined as:
\[
T_{n,e,k}=\{x\mid\forall m < k, m\in\mathbb{N}, x\in\mathbb{Z}_n^*, x^{ek}\equiv x\pmod{n}, x^m\neq x\pmod{n}\}
\]
3. **Main Results of the Paper**:
- Through dynamic system analysis, the paper derives a formula for calculating the number of fixed points of order \(k\).
- The main results include two theorems:
- **Theorem 1**: Gives the calculation formula of \(|T_{n,e,k}|\):
\[
|T_{n,e,k}|=\sum_{d\mid k}\mu\left(\frac{k}{d}\right)\gcd(e^d - 1, p - 1)\gcd(e^d - 1, q - 1)
\]
where \(\mu(\cdot)\) is the Möbius function.
- **Theorem 2**: Gives the cardinality formula of the set of fixed points of order \(k\), \(E_{n,e,k}\):
\[
|E_{n,e,k}|=\sum_{d\mid k}\mu\left(\frac{k}{d}\right)\left(\gcd(e^d - 1, p - 1)+ 1\right)\left(\gcd(e^d - 1, q - 1)+ 1\right)
\]
4. **Conclusion and Significance**:
- If the factorization of \(n\) is known, the number of fixed points of order \(k\) in the RSA system can be simply and conveniently calculated by the above formulas.
- This is crucial for choosing an appropriate encryption exponent \(e\) to ensure that the RSA system is protected from fixed - point attacks.
- In addition, the paper also proposes directions for further research, such as whether there exists a polynomial - time algorithm to find non - trivial fixed points \(m\neq0,\pm1\), which may be equivalent to the factorization problem of the RSA modulus.
In conclusion, this paper solves the problem of quantitatively describing the number of fixed points of order \(k\) in the RSA system and provides an effective calculation method, which is of great significance for the security and parameter selection of the RSA system.