rsa-attack-techniques

RSA attack selection involves analyzing observable parameters like small n, small e, shared factors, or oracle access to route to the correct cryptanalytic method. This playbook matches your specific RSA conditions to the appropriate factorization, lattice, or oracle exploitation technique for plaintext recovery.

For small public exponents in RSA cryptanalysis, you can apply lattice-based small-root attacks like Coppersmith, or broadcast attacks if multiple ciphertexts are present. The skill provides mathematical derivations and implementation sketches for these small-exponent exploit techniques.

Recovering RSA plaintext with a padding oracle involves exploiting the observable oracle responses to iteratively decrypt the message. This skill details the Bleichenbacher flow and parity oracle workflows to systematically extract plaintext from vulnerable RSA implementations.

Yes, you can factor RSA moduli with shared factors using the common modulus technique or by computing the greatest common divisor across multiple keys. The attack catalog includes factorization methods like Pollard's rho to handle these shared modulus vulnerabilities.

Yes, this RSA cryptanalysis skill covers lattice techniques including the full Wiener attack and Boneh-Durfee method. These attacks target RSA vulnerabilities where the private exponent is small, providing mathematical derivations and implementation sketches for recovery.

Exploiting RSA-CRT signature faults involves using the faulty signature output to factor the modulus and recover the private key. The skill provides an RSA-CRT fault factoring workflow that calculates the prime factors from the incorrect signature computation.