Re: deadbeef attack was choose low order RSA bits (Re: Key Pair Agreement?)

2003-01-23 Thread Adam Back
On Wed, Jan 22, 2003 at 03:18:34PM +1300, Peter Gutmann wrote: > >One cheap way the low order 64 bits can be set is to set the low order bits > >of p to the target bitset and the low order bits of q to ...1 (63 0s and > >one 1 in binary), and then to increase the stride of candidate values in t

Re: deadbeef attack was choose low order RSA bits (Re: Key Pair Agreement?)

2003-01-21 Thread Peter Gutmann
Adam Back <[EMAIL PROTECTED]> writes: >On Mon, Jan 20, 2003 at 09:08:31PM -0500, Radia Perlman wrote: >>[...] I was going to suggest something similar to what David Wagner >>suggested, but with Scott telling Alice the modulus size and the >>*high* order 64 bits (with the top bit constrained to be 1

deadbeef attack was choose low order RSA bits (Re: Key Pair Agreement?)

2003-01-21 Thread Adam Back
On Mon, Jan 20, 2003 at 09:08:31PM -0500, Radia Perlman wrote: > [...] I was going to suggest something similar to what David Wagner > suggested, but with Scott telling Alice the modulus size and the > *high* order 64 bits (with the top bit constrained to be 1). I can > see how Alice can easily gen