Abstract:RSA is an incredibly successful and useful asymmetric encryption algorithm. One of the types of implementation flaws in RSA is low entropy of the key generation, specifically the prime number creation stage. This can occur due to flawed usage of random prime number generator libraries, or on computers where there is a lack of a source of external entropy. These implementation flaws result in some RSA keys sharing prime factors, which means that the full factorization of the public modulus can be recovered incredibly efficiently by performing a computation GCD between the two public key moduli that share the prime factor. However, since one does not know which of the composite moduli share a prime factor a-priori, to determine if any such shared prime factors exist, an all-to-all GCD attack (also known as a batch GCD attack, or a bulk GCD attack) can be performed on the available public keys so as to recover any shared prime factors. This study describes a novel all-to-all batch GCD algorithm, which will be referred to as the binary tree batch GCD algorithm, that is more efficient than the current best batch GCD algorithm (the remainder tree batch GCD algorithm). A comparison against the best existing batch GCD method (which is a product tree followed by a remainder tree computation) is given using a dataset of random RSA moduli that are constructed such that some of the moduli share prime factors. This proposed binary tree batch GCD algorithm has better runtime than the existing remainder tree batch GCD algorithm, although asymptotically it has nearly identical scaling and its complexity is dependent on how many shared prime factors exist in the set of RSA keys. In practice, the implementation of the proposed binary tree batch GCD algorithm has a roughly 6x speedup compared to the standard remainder tree batch GCD approach.

Improved Key Generation Algorithm for Gentry's Fully Homomorphic Encryption Scheme

Improved Key Generation Algorithm for Gentry’s Fully Homomorphic Encryption Scheme

Faster Fully Homomorphic Encryption

Toward Basing Fully Homomorphic Encryption on Worst-Case Hardness

On the exact decryption range for Gentry–Halevi's implementation of fully homomorphic encryption

Fully Homomorphic Encryption over the Integers

A (Leveled) fully homomorphic encryption scheme based on error-free approximate GCD

A Faster Fully Homomorphic Encryption Scheme in Big Data

Fully homomorphic encryption scheme and Fermat's little theorem

Towards Fully Homomorphic Encryption From Gentry-Peikert-Vaikuntanathan Scheme

Fully Homomorphic Encryption from Approximate Ideal Lattices

A New Algorithm for Solving the General Approximate Common Divisors Problem and Cryptanalysis of the FHE Based on the GACD problem

Exploring the Feasibility of Fully Homomorphic Encryption

A New ElGamal-Based Algebraic Homomorphism and Its Application

More efficient DDH pseudorandom generators

Asymptotically Faster Multi-Key Homomorphic Encryption from Homomorphic Gadget Decomposition

An Efficient FHE Radix-2 Addition Algorithm in BGV Scheme

Compact GF(2) Systemizer and Optimized Constant-Time Hardware Sorters for Key Generation in Classic McEliece.

A New Somewhat Homomorphic Encryption Scheme over Integers

An Efficient All-to-All GCD Algorithm for Low Entropy RSA Key Factorization