Affiliations 

  • 1 Institute for Mathematical Research, Universiti Putra Malaysia, Serdang, Selangor, Malaysia
  • 2 Department of Mathematics, Faculty of Science, Universiti Putra Malaysia, Serdang, Selangor, Malaysia
PLoS One, 2021;16(3):e0248888.
PMID: 33760865 DOI: 10.1371/journal.pone.0248888

Abstract

This paper presents a cryptanalytic approach on the variants of the RSA which utilizes the modulus N = p2q where p and q are balanced large primes. Suppose [Formula: see text] satisfying gcd(e, ϕ(N)) = 1 where ϕ(N) = p(p - 1)(q - 1) and d < Nδ be its multiplicative inverse. From ed - kϕ(N) = 1, by utilizing the extended strategy of Jochemsz and May, our attack works when the primes share a known amount of Least Significant Bits(LSBs). This is achievable since we obtain the small roots of our specially constructed integer polynomial which leads to the factorization of N. More specifically we show that N can be factored when the bound [Formula: see text]. Our attack enhances the bound of some former attacks upon N = p2q.

* Title and MeSH Headings from MEDLINE®/PubMed®, a database of the U.S. National Library of Medicine.