The Rabin cryptosystem revisited

Michele Elia,Matteo Piva,Davide Schipani

DOI: https://doi.org/10.48550/arXiv.1108.5935

2013-11-03

Abstract:The Rabin public-key cryptosystem is revisited with a focus on the problem of identifying the encrypted message unambiguously for any pair of primes. In particular, a deterministic scheme using quartic reciprocity is described that works for primes congruent 5 modulo 8, a case that was still open. Both theoretical and practical solutions are presented. The Rabin signature is also reconsidered and a deterministic padding mechanism is proposed.

Number Theory,Cryptography and Security,Information Theory

What problem does this paper attempt to address?

This paper attempts to solve an important problem in the Rabin public - key cryptosystem, that is, how to uniquely identify the encrypted message during the decryption process without additional information or complex calculations. Specifically, the paper mainly focuses on:

1. **Proposal of a deterministic scheme**: The paper proposes a deterministic scheme based on the quartic reciprocity law, which is applicable to prime number pairs that are congruent to 5 modulo 8. The situation of such prime number pairs has not been solved before.

2. **Unique identification of roots**: For any pair of prime numbers, the paper explores how to uniquely identify the correct root among the four roots through additional information. This includes using mathematical tools such as the Jacobi symbol, the Dedekind sum, and higher - order residue symbols.

3. **Improvement of the signature scheme**: The paper also reconsiders the Rabin signature scheme and proposes a deterministic padding mechanism to improve the security and efficiency of the signature.

### Main contributions of the paper

- **Solution for specific prime number pairs**: The paper solves the problem of how to uniquely identify roots when \(p\) and \(q\) are congruent to 5 modulo 8. This is an open problem that has not been solved before.

- **New identification rules**: New identification rules based on the Dedekind sum are introduced for the Rabin scheme in the standard setting (i.e., the case where both prime factors are congruent to 3 modulo 4).

- **Application of higher - order residues**: Higher - order residue symbols and their reciprocity laws, especially the quartic residue symbol, are explored for a wider range of prime number pairs.

- **Improvement of the signature mechanism**: A new deterministic padding mechanism is proposed, making the Rabin signature more secure and efficient.

### Formula summary

The key formulas involved in the paper include:

1. **Roots of the quadratic equation**:
\[
x^2\equiv C\pmod{N}
\]
where \(N = pq\), \(p\) and \(q\) are two prime numbers, and \(C = m^2\mod N\).

2. **Quartic reciprocity law**:
\[
\left[\frac{\alpha}{\pi}\right]_4 = i^j\quad\text{where}\quad\alpha^{N(\pi)- 1/4}\equiv i^j\pmod{\pi}
\]

3. **Dedekind sum**:
\[
s(h,k)=\sum_{j = 1}^{k}\left(\left(\frac{hj}{k}\right)\right)\left(\left(\frac{j}{k}\right)\right)
\]
where \(((x))\) represents the sawtooth function.

These formulas and methods together form the core content of the paper, aiming to solve the root identification problem in the Rabin cryptosystem, thereby improving its security and practicality.