← Back to context

Comment by mitxela

11 hours ago

Doubling per bit is for symmetric encryption, where no attack better than brute force is known. RSA can be attacked using much faster techniques than brute force.

Can you point at some papers or articles that talk about attacks specifically on RSA? I've done a search and have a few references, but I'd be interested to know if you have any particular examples in mind.

I know that factoring (which attacks RSA) is sub-exponential, and I know that implementations of RSA (bad choices of primes, timing attacks, etc) can have weaknesses ... I'm just interested as to whether you have something else in mind.

Thx.

  • I think you're looking for the large formula at the top here: https://en.wikipedia.org/wiki/General_number_field_sieve

    Reference to a scientific paper is given: https://www.ams.org/notices/199612/pomerance.pdf

    • That's referring to attacking the factoring problem, which is one method of attacking RSA, and as I said is known to be faster than exponential, but it felt like the comment to which I was replying was talking about something other than just faster factoring.

      I know there are other attacks on RSA, I was interested to know if the poster to whom I was replying knew of any others (other than factoring, which is kinda obvious). After all, I said:

      > I know that factoring (which attacks RSA) is sub-exponential, ...