Loading...
conference paper
Selective forgery of RSA signatures with fixed-pattern padding
2002
Public Key Cryptography. 4th International Workshop on Practice and Theory in Public Key Cryptosystems, PKC 2002. Proceedings
We present a practical selective forgery attack against RSA signatures with fixed-pattern padding shorter than two thirds of the modulus length. Our result extends the practical existential forgery of such RSA signatures (Brier et al., 2001). For an n-bit modulus the heuristic asymptotic runtime of our forgery is comparable to the time required to factor a modulus of only 9/64 n bits. Thus, the security provided by short fixed-pattern padding is negligible compared to the security it is supposed to provide
Loading...
Name
EPFL-CONF-149709.pdf
Access type
openaccess
Size
510.63 KB
Format
Adobe PDF
Checksum (MD5)
8975c18d55fc0911d025cc1c44cfa00d