Index calculation attacks on RSA signature and encryption

Jean Sébastien Coron; David Naccache; Yvo Desmedt; Andrew Odlyzko; Julien P. Stern

doi:10.1007/s10623-004-5660-y

Index calculation attacks on RSA signature and encryption

Jean Sébastien Coron, David Naccache, Yvo Desmedt, Andrew Odlyzko, Julien P. Stern

School of Mathematics

Research output: Contribution to journal › Article › peer-review

6 Scopus citations

Abstract

At Crypto '85, Desmedt and Odlyzko described a chosen-ciphertext attack against plain RSA encryption. The technique can also be applied to RSA signatures and enables an existential forgery under a chosen-message attack. The potential of this attack remained untapped until a twitch in the technique made it effective against two very popular RSA signature standards, namely iso/iec 9796-1 and iso/iec 9796-2. Following these attacks, iso/iec 9796-1 was withdrawn and ISO/IEC 9796-2 amended. In this paper, we explain in detail Desmedt and Odlyzko's attack as well as its application to the cryptanalysis of iso/iec 9796-2.

Original language	English (US)
Pages (from-to)	41-53
Number of pages	13
Journal	Designs, Codes, and Cryptography
Volume	38
Issue number	1
DOIs	https://doi.org/10.1007/s10623-004-5660-y
State	Published - Jan 2006

Keywords

Cryptanalsis
Forgery
ISO 9796
Index Calculation
RSA
Signature
Smoothness

UN SDGs

This output contributes to the following UN Sustainable Development Goals (SDGs)

Publisher link

10.1007/s10623-004-5660-y

Find It

Find It at U of M Libraries

Cite this

@article{5fe2a61bccc94055afb5e59b7e5b38b4,

title = "Index calculation attacks on RSA signature and encryption",

abstract = "At Crypto '85, Desmedt and Odlyzko described a chosen-ciphertext attack against plain RSA encryption. The technique can also be applied to RSA signatures and enables an existential forgery under a chosen-message attack. The potential of this attack remained untapped until a twitch in the technique made it effective against two very popular RSA signature standards, namely iso/iec 9796-1 and iso/iec 9796-2. Following these attacks, iso/iec 9796-1 was withdrawn and ISO/IEC 9796-2 amended. In this paper, we explain in detail Desmedt and Odlyzko's attack as well as its application to the cryptanalysis of iso/iec 9796-2.",

keywords = "Cryptanalsis, Forgery, ISO 9796, Index Calculation, RSA, Signature, Smoothness",

author = "Coron, {Jean S{\'e}bastien} and David Naccache and Yvo Desmedt and Andrew Odlyzko and Stern, {Julien P.}",

year = "2006",

month = jan,

doi = "10.1007/s10623-004-5660-y",

language = "English (US)",

volume = "38",

pages = "41--53",

journal = "Designs, Codes, and Cryptography",

issn = "0925-1022",

publisher = "Springer Netherlands",

number = "1",

}

TY - JOUR

T1 - Index calculation attacks on RSA signature and encryption

AU - Coron, Jean Sébastien

AU - Naccache, David

AU - Desmedt, Yvo

AU - Odlyzko, Andrew

AU - Stern, Julien P.

PY - 2006/1

Y1 - 2006/1

N2 - At Crypto '85, Desmedt and Odlyzko described a chosen-ciphertext attack against plain RSA encryption. The technique can also be applied to RSA signatures and enables an existential forgery under a chosen-message attack. The potential of this attack remained untapped until a twitch in the technique made it effective against two very popular RSA signature standards, namely iso/iec 9796-1 and iso/iec 9796-2. Following these attacks, iso/iec 9796-1 was withdrawn and ISO/IEC 9796-2 amended. In this paper, we explain in detail Desmedt and Odlyzko's attack as well as its application to the cryptanalysis of iso/iec 9796-2.

AB - At Crypto '85, Desmedt and Odlyzko described a chosen-ciphertext attack against plain RSA encryption. The technique can also be applied to RSA signatures and enables an existential forgery under a chosen-message attack. The potential of this attack remained untapped until a twitch in the technique made it effective against two very popular RSA signature standards, namely iso/iec 9796-1 and iso/iec 9796-2. Following these attacks, iso/iec 9796-1 was withdrawn and ISO/IEC 9796-2 amended. In this paper, we explain in detail Desmedt and Odlyzko's attack as well as its application to the cryptanalysis of iso/iec 9796-2.

KW - Cryptanalsis

KW - Forgery

KW - ISO 9796

KW - Index Calculation

KW - RSA

KW - Signature

KW - Smoothness

UR - http://www.scopus.com/inward/record.url?scp=29344440987&partnerID=8YFLogxK

UR - http://www.scopus.com/inward/citedby.url?scp=29344440987&partnerID=8YFLogxK

U2 - 10.1007/s10623-004-5660-y

DO - 10.1007/s10623-004-5660-y

M3 - Article

AN - SCOPUS:29344440987

SN - 0925-1022

VL - 38

SP - 41

EP - 53

JO - Designs, Codes, and Cryptography

JF - Designs, Codes, and Cryptography

IS - 1

ER -

Index calculation attacks on RSA signature and encryption

Abstract

Keywords

UN SDGs

Publisher link

Find It

Other files and links

Fingerprint

Cite this