首页|Cryptanalysis of a Type of CRT-Based RSA Algorithms

Cryptanalysis of a Type of CRT-Based RSA Algorithms

扫码查看
原文链接
  • NETL
  • NSTL
  • 万方数据
  • 维普
It is well known that the Chinese Remainder Theorem (CRT) can greatly improve the performances of RSA cryptosystem in both running times and memory requirements. However, if the implementation of CRT-based RSA is careless, an attacker can reveal some secret information by exploiting hardware fault cryptanalysis. In this paper, we present some fault attacks on a type of CRT-RSA algorithms namely BOS type schemes including the original BOS scheme proposed by Blomer, Otto, and Seifert at CCS 2003 and its modified scheme proposed by Liu et al. at DASC 2006. We first demonstrate that if some special signed messages such as m = 0, ±1 are dealt carelessly, they can be exploited by an adversary to completely break the security of both the BOS scheme and Liu et al.'s scheme. Then we present a new permanent fault attack on the BOS scheme with a success probability about 25%. Lastly, we propose a polynomial time attack on Liu et al.'s CRT-RSA algorithm, which combines physical fault injection and lattice reduction techniques when the public exponent is short.

Chinese remainder theoremRSABOS schemecryptanalysisfault attackLLL

Bao-Dong Qini、Ming Li、Fan-Yu Kong

展开 >

College of Computer Science and Technology, Southwest University of Science and Technology, Mianyang 621010, China

Institute of Network Security, Shandong University, Jinan 250100, China

Key Laboratory of Cryptographic Technology and Information Security, Jinan 250100, China

2008

计算机科学技术学报(英文版)
中国计算机学会

计算机科学技术学报(英文版)

CSTPCDCSCDSCIEI
影响因子：0.432
ISSN：1000-9000
年,卷(期)：2008.23(2)
  • 1
  • 23