2 ms·
Oh, my bad I misunderstood. Yes, you could just construct a system of 65537 equations in 65537 variables. You can't do a binary search though. Remember, all you
by doomrobo 4y ago
Oh, my bad I misunderstood. Yes, you could just construct a system of 65537 equations in 65537 variables. You can't do a binary search though. Remember, all you have access to is c (mod p_i) for i = 1, ..., 65537. To do a binary search, you'd need the integer c (not mod anything).
- jwilk 4y agoBut the gist of this attack is that you can recover integer c with Chinese Remainder Theorem. Then you can use binary search (or another root-finding algorithm) to get m.