On Fixed Points of Order K of RSA

Shaohua Zhang

DOI: https://doi.org/10.48550/arXiv.0907.4096

2009-07-23

Abstract:In this paper, we gave a preliminary dynamical analysis on the RSA cryptosystem and obtained a computational formulae of the number of the fixed points of $k$ order of the RSA. Thus, the problem in [8, 9] has been solved.

Number Theory,Dynamical Systems

What problem does this paper attempt to address?

Remarks on the Bounds for Cryptanalysis of Low Private Key RSA

Haijian Zhou,Ping Luo,Daoshun Wang,Yiqi Dai

DOI: https://doi.org/10.1016/j.pnsc.2008.09.013

2009-01-01

Abstract:Boneh and Durfee have developed a cryptanalytic algorithm on low private key RSA. The algorithm is based on lattice basis reduction and breaks RSA with private key d < N-0.292. Later on, an improved version by Blomer and May enhanced the efficiency, while reaching approximately this same upper bound. Unfortunately, in both the algorithms, there is a critical error in theoretical analysis, leading to the overestimated upper bound N-0.292. In this paper we present a more precise analytical model, with which the theoretical upper bound on d is modified to approximately d < N-0.277 for ordinary RSA systems with a 1024-bit public key (N,e). (C) 2009 National Natural Science Foundation of China and Chinese Academy of Sciences. Published by Elsevier Limited and Science in China Press. All rights reserved.
Counting RSA-Integers

Andreas Decker,Pieter Moree

DOI: https://doi.org/10.1007/s00025-008-0285-5

2008-02-26

Results in Mathematics

Abstract:Abstract.In the RSA cryptosystem integers of the form n = p · q with p and q primes of comparable size (‘RSA-integers’) play an important role. It is a folklore result of cryptographers thatCr(x), the number of integers n≤ x that are of the form n = pq with p and q primes such that p < q < rp, is for fixed r > 1 asymptotically equal to crx log−2 x for some constant cr > 0. Here we prove this and show that cr = 2logr.

mathematics, applied
A variety of Euler’s sum of powers conjecture

Tianxin Cai,Yong Zhang

DOI: https://doi.org/10.21136/CMJ.2021.0210-20

2021-01-01

Czechoslovak Mathematical Journal

Abstract:We consider a variety of Euler’s sum of powers conjecture, i.e., whether the Diophantine system $$\left\{{\matrix{{n = {a_1} + {a_2} + \ldots + {a_{s - 1}},} \hfill \cr {{a_1}{a_2} \ldots {a_{s - 1}}({a_1} + {a_2} + \ldots + {a_{s - 1}}) = {b^s}} \hfill \cr}} \right.$$ has positive integer or rational solutions n, b, aj, i = 1, 2, …, s − 1, s ⩾ 3. Using the theory of elliptic curves, we prove that it has no positive integer solution for s = 3, but there are infinitely many positive integers n such that it has a positive integer solution for s ⩾ 4. As a corollary, for s ⩾ 4 and any positive integer n, the above Diophantine system has a positive rational solution. Meanwhile, we give conditions such that it has infinitely many positive rational solutions for s ⩾ 4 and a fixed positive integer n.
Estimate on the Number of Fix-Points of Composite Entire Functions

Jian-Hua Zheng,Chung-Chun Yang

DOI: https://doi.org/10.1080/17476939408814722

1994-01-01

Abstract:We obtain some quantitative estimates on the number of fixpoints of composite entire function f(g(z)) in the sense of k-order ρk(f(g)). For example, it is proved that if and T(r,f)=O((logr)ρ)(p>1), then the k-order of the counting function N(r,1/(f(g)-z)) is ρk(f(g)), which extends the main result of Bergweiler [1].
Cryptanalysis of RSA for a Special Case with D >E

Ping Luo,HaiJian Zhou,DaoShun Wang,YiQi Dai

DOI: https://doi.org/10.1007/s11432-009-0014-z

2009-01-01

Abstract:In this paper, we study the RSA public key cryptosystem in a special case with the private exponent d larger than the public exponent e . When N 0.258 ⩽ e ⩽ N 0.854 , d > e and satisfies the given conditions, we can perform cryptanalytic attacks based on the LLL lattice basis reduction algorithm. The idea is an extension of Boneh and Durfee’s researches on low private key RSA, and provides a new solution to finding weak keys in RSA cryptosystems.
Fixed points of K-Fibonacci sequences

Brennan Benfield,Oliver Lippard

2024-07-29

Abstract:A $K$-Fibonacci sequence is a binary recurrence sequence where $F_0=0$, $F_1=1$, and $F_n=K\cdot F_{n-1}+F_{n-2}$. These sequences are known to be periodic modulo every positive integer greater than $1$. If the length of one shortest period of a $K$-Fibonacci sequence modulo a positive integer is equal to the modulus, then that positive integer is called a $\textit{fixed point}$. This paper determines the fixed points of $K$-Fibonacci sequences according to the factorization of $K^2+4$ and concludes that if this process is iterated, then every modulus greater than $3$ eventually terminates at a fixed point.

Number Theory
On rank in algebraic closure

Amichai Lampert,Tamar Ziegler

DOI: https://doi.org/10.1007/s00029-023-00903-5

2024-01-31

Abstract:Let $ {\mathbf k} $ be a field and $Q\in {\mathbf k}[x_1, \ldots, x_s]$ a form (homogeneous polynomial) of degree $d>1.$ The ${\mathbf k}$-Schmidt rank $rk_{\mathbf k}(Q)$ of $Q$ is the minimal $r$ such that $Q= \sum_{i=1}^r R_iS_i$ with $R_i, S_i \in {\mathbf k}[x_1, \ldots, x_s]$ forms of degree $<d$. When $ {\mathbf k} $ is algebraically closed, this rank is essentially equivalent to the codimension in $ {\mathbf k}^s $ of the singular locus of the variety defined by $ Q, $ known also as the Birch rank of $ Q. $ When $ {\mathbf k} $ is a number field, a finite field or a function field, we give polynomial bounds for $ rk_{\mathbf k}(Q) $ in terms of $ rk_{\bar {\mathbf k}} (Q) $ where $ \bar {\mathbf k} $ is the algebraic closure of $ {\mathbf k}. $ Prior to this work no such bound (even ineffective) was known for $d>4$. This result has immediate consequences for counting integer points (when $ {\mathbf k} $ is a number field) or prime points (when $ {\mathbf k} = \mathbb Q $) of the variety $ \{Q=0\} $ assuming $ rk_{\mathbf k} (Q) $ is large.

Number Theory,Commutative Algebra,Algebraic Geometry
New simultaneous Diophantine attacks on generalized RSA key equations

Wan Nur Aqlili Ruzai,Muhammad Rezal Kamel Ariffin,Muhammad Asyraf Asbullah,Amir Hamzah Abd Ghafar

DOI: https://doi.org/10.1016/j.jksuci.2024.102074

IF: 9.006

2024-05-25

Journal of King Saud University - Computer and Information Sciences

Abstract:RSA stands as a widely adopted method within asymmetric cryptography, commonly applied for digital signature validation and message encryption. The security of RSA relies on the challenge of integer factorization, a problem considered either computationally infeasible or highly intricate, especially when dealing with sufficiently large security parameters. Effective exploits of the integer factorization problem in RSA can allow an adversary to assume the identity of the key holder and decrypt such confidential messages. The keys employed in secure hardware are particularly significant due to the typically greater value of the information they safeguard, such as in the context of securing payment transactions. In general, RSA faces various attacks exploiting weaknesses in its key equations. This paper introduces a new vulnerability that enables the concurrent factorization of multiple RSA moduli. By working with pairs (Ni,ei) and a fixed value y satisfying the Diophantine equation eixi2−y2φ(Ni)=zi , we successfully factorized these moduli simultaneously using the lattice basis reduction technique. Notably, our research expands the scope of RSA decryption exponents considered as insecure.

computer science, information systems
On an Attack on RSA with Small CRT-exponents

LiDong Han,XiaoYun Wang,GuangWu Xu

DOI: https://doi.org/10.1007/s11432-010-4029-2

2010-01-01

Science China Information Sciences

Abstract:This paper concerns the RSA system with private CRT-exponents. Since Chinese remainder rep- resentation provides efficiency in computation, such system is of some practical significance. In this paper, an existing attack to small private CRT-exponents is analyzed. It is indicated that this attack makes nice use of lattice in RSA analysis, but some argument does not hold in general. Several counterexamples are constructed. Refinements and more precise statements of the attack are given.
Cryptanalysis of Exhaustive Search on Attacking RSA.

Mu-En Wu,Raylin Tso,Hung-Min Sun

DOI: https://doi.org/10.1007/978-3-642-34601-9_28

2012-01-01

Abstract:In RSA equation: ed=k·φ(N)+1, we may guess on partial bits of d or p+q by doing an exhaustive search to further extend the security boundary of d. In this paper, we discuss the following question: Does guessing on p+q bring more benefit than guessing on d? We provide the detailed analysis on this problem by using the lattice reduction technique. Our analysis shows that leaking partial most significant bits (MSBs) of p+q in RSA risks more than leaking partial MSBs of d. This result inspires us to further extend the boundary of the Boneh-Durfee attack to N0.284+Δ, where Δ is contributed by the capability of exhaustive search. Assume that doing an exhaustive search for 64 bits is feasible in the current computational environment, the boundary of the Boneh-Durfee attack should be raised to d<N0.328 for an 1024-bit RSA modulus. This is a 37 bits improvement over Boneh and Durfee's boundary.
Remarks on Cryptanalysis of RSA Using Lattice Basis Reduction

Haijian Zhou,Ping Luo,Daoshun Wang,Yiqi Dai

DOI: https://doi.org/10.1109/csie.2009.890

2009-01-01

Abstract:Lattice basis reduction algorithms have contributed a lot to cryptanalysis of RSA systems. A typical application is Boneh-Durfee's seminal work for breaking low private key RSA (and its successors in other applications). Although it's well known that this technique is not guaranteed to succeed, there is no thorough proof yet when it fails. In this paper, we summarize the Boneh-Durfee-like algorithms using generalized terminology. We also show that when the number of solutions in given bounded range is larger than $8(w/3)^7$, where $w$ is the dimension of the lattice involved in the reduction procedure, then the algorithm always fails. As a result, it is proven that MSB (Most Significant Bits)partial key exposure attacks on low public key RSA using this technique is difficult, if we have not sufficient private key exposed.
Fixed points of automorphisms of real algebraic curves

Jean-Philippe Monnier

DOI: https://doi.org/10.48550/arXiv.math/0609811

2006-09-28

Abstract:We bound the number of fixed points of an automorphism of a real curve in terms of the genus and the number of connected components of the real part of the curve. Using this bound, we derive some consequences concerning the maximum order of an automorphism and the maximum order of an abelian group of automorphisms of a real curve. We also bound the full group of automorphisms of a real hyperelliptic curve.

Algebraic Geometry
Cryptoanalysis of RSA variants with special structure of RSA primes

M. Anwar,Mustafa Ismail,H.M. Bahig

2024-03-10

Abstract:In this paper, we present attacks on three types of RSA modulus when the least significant bits of the prime factors of RSA modulus satisfy some conditions. Let $p,$ and $q$ be primes of the form $p=a^{m_1}+r_p$ and $q=b^{m_2}+r_q$ respectively, where $a,b,m_{1},m_{2} \in \mathbb{Z^+}$ $r_p,$ and $ r_q$ are known. The first attack is when the RSA modulus is $N=pq$ where $m_1$ or $m_2$ is an even number. If $\left(r_{p}r_{q}\right)^\frac{1}{2}$ is sufficiently small, then $N$ can be factored in polynomial time. The second attack is when $N=p^{s}q,$ where $q>p$ and $s$ divides $m_2.$ If $r_pr_q$ is sufficiently small, then $N$ can be factored in polynomial time. The third attack is when $N=p^{s+l}q^{s},$ where $p>q,$ $s,l \in \mathbb{Z^+},$ $l < \frac{s}{2}$ and $s$ divides $m_1l.$ If $a^{m_1}>qa^{\frac{m_1l}{s}},$ and $lr^3_p$ is sufficiently small, then $N$ can be factored in polynomial time.

Number Theory
Polynomial Solutions Modulo $p^s$ of Differential KZ and Dynamical Equations

Pavel Etingof,Alexander Varchenko

DOI: https://doi.org/10.3842/SIGMA.2023.061

2023-09-01

Abstract:We construct polynomial solutions modulo $p^s$ of the differential KZ and dynamical equations where $p$ is an odd prime number.

Algebraic Geometry,Mathematical Physics,Number Theory,Representation Theory
An Improved Cryptanalysis of Large RSA Decryption Exponent with Constrained Secret Key

Majid Mumtaz,Ping Luo

DOI: https://doi.org/10.1504/ijics.2021.113168

2021-01-01

International Journal of Information and Computer Security

Abstract:In this study, we revisit the RSA public key cryptosystem in some special case of Boneh and Durfee's attack when the private key d assumes to be larger than the public key e . The attack in this study is the variation of an approach adopted by Luo et al. (2009) based on large decryption exponent. They had chosen a large private key ( d > e ) and found the weak keys in some specific range between N 0.258 ≤ e ≤ N 0.857 . We highlight the shortcomings and new improvements in our study with more refined bound analysis up to the range between N 0.104 ≤ e ≤ N 0.923 . Our experimental results revealed more refined bounds using lattice-based Coppersmith's method. In our experimental yield, we find the small roots of the devised polynomial, which helps to factorise the RSA modulus of size up to 1,024-bits. We also measure the probability of a specific range of weak keys, which further certify our results about weak keys in an RSA constrained secret key environment.
On Blecher and Knopfmacher's Fixed Points for Integer Partitions

Brian Hopkins,James A. Sellers

DOI: https://doi.org/10.1016/j.disc.2024.113938

2023-05-09

Abstract:Recently, Blecher and Knopfmacher explored the notion of fixed points in integer partitions and hypothesized on the relative number of partitions with and without a fixed point. We resolve their open question by working fixed points into a growing number of interconnected partition statistics involving Frobenius symbols, Dyson's crank, and the mex (minimal excluded part). Also, we generalize the definition of fixed points and connect that expanded notion to the $\text{mex}_j$ defined by Hopkins, Sellers, and Stanton as well as the $j$-Durfee rectangle defined by Hopkins, Sellers, and Yee.

Combinatorics
The critical points of a polynomial

Zaizhao Meng

DOI: https://doi.org/10.48550/arXiv.1301.0226

2013-01-02

Abstract:In this paper, we obtain new results on the critical points of a polynomial, these results are useful to the Sendov conjecture.

Complex Variables
A note on the order of the Tate--Shafarevich group modulo squares

Alexandros Konstantinou

2024-04-26

Abstract:We investigate the order of the Tate--Shafarevich group of abelian varieties modulo rational squares. Our main result shows that every square-free natural number appears as the non square-free part of the Tate--Shafarevich group of some abelian variety, thereby validating a conjecture of W. Stein.

Number Theory
Fixed Point Formula for Characters of Automorphism Groups, Associated with Kahler Classes

A Futaki,K Tsuboi

DOI: https://doi.org/10.4310/mrl.2001.v8.n4.a9

2001-01-01

Mathematical Research Letters

Abstract:The existence problem of Kähler-Einstein metrics of positive scalar curvature has not been settled yet completely. There are known obstructions, among which there is a character f of the complex Lie algebra h(M) of all holomorphic vector fields defined in [8]. In our works [11], [10], [13], [21], we studied how this Lie algebra character lifted to a character of the group of biholomorphic automomorphisms. It was shown using Chern-Simons theory that it is lifted to an additive group character with values in C/Z. The imaginary part was written as an integral formula, while the R/Z-valued real part was given as a fixed point formula for automorphisms. On the other hand the Lie algebra character f can be extended to an obstruction fΩ for Kähler classes Ω to contain a constant scalar curvature metric [9], [6]. More precisely, let M be an m−dimensional compact Kähler manifold with a fixed Kähler class Ω, ω ∈ Ω a Kähler form and sω the scalar curvature of ω. Then there exists a smooth function Fω uniquely up to constants such that sω − mμΩ = ∆Fω where
On Disjoint Residue Classes

Zw Sun

DOI: https://doi.org/10.1016/0012-365X(92)90454-N

IF: 0.961

1992-01-01

Discrete Mathematics

Abstract:The purpose of this note is to show that, if n1, . . . , n(k) are positive integers, and for each d is-an-element-of Z+ satisfying f(d) less-than-or-equal-to k - 2 or a weaker condition d less-than-or-equal-to 2k-2 (where f(d) = SIGMA(i=1)r alpha(i)(p(i) - 1) if PI(i=1)r p(i)alpha-i is the prime factorization of d), the number of pairs {i, j} (1 less-than-or-equal-to i < j less-than-or-equal-to k) with gcd (n(i), n(j)) = d is less than square-root(d + 7)/8, then there exist integers a1, . . . , a(k) such that the residue classes a1(mod n1), . . . , a(k)(mod n(k)) are pairwise disjoint. We conjecture that square-root(d + 7)/8 can be replaced by 2d - 1.

On Fixed Points of Order K of RSA

Remarks on the Bounds for Cryptanalysis of Low Private Key RSA

Counting RSA-Integers

A variety of Euler’s sum of powers conjecture

Estimate on the Number of Fix-Points of Composite Entire Functions

Cryptanalysis of RSA for a Special Case with D >E

Fixed points of K-Fibonacci sequences

On rank in algebraic closure

New simultaneous Diophantine attacks on generalized RSA key equations

On an Attack on RSA with Small CRT-exponents

Cryptanalysis of Exhaustive Search on Attacking RSA.

Remarks on Cryptanalysis of RSA Using Lattice Basis Reduction

Fixed points of automorphisms of real algebraic curves

Cryptoanalysis of RSA variants with special structure of RSA primes

Polynomial Solutions Modulo $p^s$ of Differential KZ and Dynamical Equations

An Improved Cryptanalysis of Large RSA Decryption Exponent with Constrained Secret Key

On Blecher and Knopfmacher's Fixed Points for Integer Partitions

The critical points of a polynomial

A note on the order of the Tate--Shafarevich group modulo squares

Fixed Point Formula for Characters of Automorphism Groups, Associated with Kahler Classes

On Disjoint Residue Classes