Lattice-Based Cryptanalysis of RSA Cryptosystem
Chao Li,Shixiong Wang,Longjiang Qu,Shaojing Fu
DOI: https://doi.org/10.16366/j.cnki.1000-2367.2017.03.001
2017-01-01
Abstract:Lattice plays an important role in the field of cryptanalysis of public key cryptosystem.In 1996,Coppersmith introduces new ways of finding small roots of polynomial equation.According to his work,from the problem of some attacks on RSA cryptosystem,one can derive the problem of finding short vectors in lattice.Lattice-based cryptanalysis of RSA cryptosystem thus begins to attract attentions,and the method has been developed into "Coppersmith's method" after some reformulations and extensions.On the one hand,about lattice-based Coppersmith'method,this paper introduces the methods of finding small roots of modular polynomial equation and integer polynomial equation,and the method of solving approximate common divisor problem.Besides,another lattice method which needs to find the shortest vector in a low-dimension lattice is also presented.On the other hand,about the cryptanalysis of RSA cryptosystem,this paper summarizes small public exponent attack,small private exponent attack,partial key exposure attack,deterministic polynomial-time equivalence of computing the private key d and factoring the modulus N,cryptanalysis of the implicit factorization problem,partial prime factor exposure attack,and cryptanalysis of RSA with multiple exponents and the same modulus.Moreover,we take Prime Power RSA,Takagi's RSA,CRT-RSA and Common Prime RSA for examples,and introduce cryptanalysis of RSA variants by means of lattice methods.