Dan Boneh had an interesting paper on this topic a few years back giving some evidence that that "breaking RSA" might in fact be easier than factoring. However, it defines "breaking RSA" as being able to DO the private-key operation, not as knowing the private key (because the latter lets you factor).

Boneh and Venkatesan. "Breaking RSA may not be equivalent to factoring." Eurocrypt '98. Springer-Verlag LNCS 1233. 1998.


Sean W. Smith, Ph.D.  [EMAIL PROTECTED]  www.cs.dartmouth.edu/~sws/
Department of Computer Science, Dartmouth College, Hanover NH USA

The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PROTECTED]

Reply via email to