Abstract:In typical RSA, it is impossible to create a key pair (e,d) such that both are simultaneously much shorter than φ (N). This is because if d is selected first, then e will be of the same order of magnitude as φ (N), and vice versa. At Asiacrypt'99, Sun et al. designed three variants of RSA using prime factors p and q of unbalanced size. The first RSA variant is an attempt to make the private exponent d short below N0.25 and N0.292 which are the lower bounds of d for a secure RSA as argued first by Wiener and then by Boneh and Durfee. The second RSA variant is constructed in such a way that both d and e have the same bit-length $\frac{1}{2}\log _{2}N+56$. The third RSA variant is constructed by such a method that allows a trade-off between the lengths of d and e. Unfortunately, at Asiacrypt'2000, Durfee and Nguyen broke the illustrated instances of the first RSA variant and the third RSA variant by solving small roots to trivariate modular polynomial equations. Moreover, they showed that the instances generated by these three RSA variants with unbalanced p and q in fact become more insecure than those instances, having the same sizes of exponents as the former, in RSA with balanced p and q. In this paper, we focus on designing a new RSA variant with balanced d and e, and balanced p and q in order to make such an RSA variant more secure. Moreover, we also extend this variant to another RSA variant in which allows a trade-off between the lengths of d and e. Based on our RSA variants, an application to entity authentication for defending the stolen-secret attack is presented.

New simultaneous Diophantine attacks on generalized RSA key equations

Improved Factoring Attacks On Multi-Prime Rsa With Small Prime Difference

Lattice-Based Cryptanalysis of RSA with Implicitly Related Keys

Several Solutions of Enhancing RSA Security

Cryptoanalysis of RSA variants with special structure of RSA primes

Implicit Related-Key Factorization Problem On The Rsa Cryptosystem

Cryptanalysis of the RSA Variant Based on Cubic Pell Equation.

Implicit-Key Attack on the RSA Cryptosystem.

Cryptanalysis of a Special Case of RSA Large Decryption Exponent Using Lattice Basis Reduction Method

New Cryptanalysis of Prime Power RSA with Two Private Exponents

A Continued Fraction-Hyperbola based Attack on RSA cryptosystem

Generalized Cryptanalysis of RSA with Small Public Exponent

An Improved Cryptanalysis of Large RSA Decryption Exponent with Constrained Secret Key

Progress in the prime factorization of large numbers

FINDING SMALL SOLUTIONS OF THE EQUATION Bx - Ay = Z AND ITS APPLICATIONS TO CRYPTANALYSIS OF THE RSA CRYPTOSYSTEM

Cryptanalysis of RSA Variants with Modified Euler Quotient.

RSA with balanced short exponents and its application to entity authentication

Estimating the Prime-Factors of an RSA Modulus and an Extension of the Wiener Attack

Solving Generalized Bivariate Integer Equations and Its Application to Factoring With Known Bits

Cryptanalysis of RSA for a Special Case with D >E

Analysis of an Enhanced Dual RSA Algorithm Using Pell’s Equation to Hide Public Key Exponent and a Fake Modulus to Avoid Factorization Attack