RSA整数的概念
Notions for RSA integers
摘要:
RSA密码系统的密钥生成算法在多个标准中指定,例如PKCS#1、IEEE 1363-2000、FIPS 186-3、ANSI X9.44或ISO/IEC 18033-2。它们的要求都有很大的不同。这表明,为了计算一个“安全”的RSA模数,如何精确地生成RSA整数并不重要。在这项工作中,我们表明,这确实是在很大程度上的情况:首先,我们给出了一个理论框架,这将使我们能够很容易地计算所考虑的标准的输出分布的熵,并表明它是相对较高的。为了做到这一点,我们计算每个标准的整数,他们定义的数量(错误非常小的顺序),并讨论不同的方法生成一个特定形式的整数。第二,我们证明了这样的整数的因式分解是困难的,提供因式分解两个素数的产品类似的大小是困难的。
英文摘要:
The key-generation algorithm for the RSA cryptosystem is specified in several standards, such as PKCS#1, IEEE 1363-2000, FIPS 186-3, ANSI X9.44, or ISO/IEC 18033-2. All of them substantially differ in their requirements. This indicates that for computing a "secure" RSA modulus it does not matter how exactly one generates RSA integers. In this work we show that this is indeed the case to a large extend: First, we give a theoretical framework that will enable us to easily compute the entropy of the output distribution of the considered standards and show that it is comparatively high. To do so, we compute for each standard the number of integers they define (up to an error of very small order) and discuss different methods of generating integers of a specific form. Second, we show that factoring such integers is hard, provided factoring a product of two primes of similar size is hard.
机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。