Lattice Reduction on Low-Exponent RSA Jason Dyer August 2002 1 Preliminaries to Coppersmith ’ s Algorithm


Coppersmith’s algorithm relies on a simple flaw in the RSA algorithm when messages are small compared to the public number N . Consider a message x encrypted with exponent e = 3 using modulus N for the public key where a < 3 √ N . Then the encryption z of x can be decrypted simply by taking the cube root, because the x operation never rotated x over the… (More)


  • Presentations referencing similar topics