We are not able to resolve this OAI Identifier to the repository landing page. If you are the repository manager for this record, please head to the Dashboard and adjust the settings.
International Association for Cryptologic Research (IACR)
Abstract
We introduce a ``generalized small inverse problem (GSIP)\u27\u27 and
present an algorithm for solving this problem. GSIP is formulated
as finding small solutions of f(x0β,x1β,β¦,xnβ)=x0βh(x1β,β¦,xnβ)+C=0(modM) for an n-variate polynomial h,
non-zero integers C and M. Our algorithm is based on
lattice-based Coppersmith technique. We provide a strategy for
construction of a lattice basis for solving f=0, which are
systematically transformed from a lattice basis for solving h=0.
Then, we derive an upper bound such that the target problem can be
solved in polynomial time in logM in an explicit form.
Since GSIPs include some RSA related problems, our algorithm is
applicable to them. For example, the small key attacks by Boneh
and Durfee are re-found automatically
Is data on this page outdated, violates copyrights or anything else? Report the problem now and we will take corresponding actions after reviewing your request.