6 ms·
Slightly off topic, but low-entropy during RSA key generation is a serious problem: https://factorable.net/weakkeys12.extended.pdf https://factorable.net/weakk
by betterunix 13y ago
Slightly off topic, but low-entropy during RSA key generation is a serious problem:
https://factorable.net/weakkeys12.extended.pdf https://factorable.net/weakkeys12.extended.pdf
- anaphor 13y agoYeah, I meant that it's not exactly the same level. Certain implementations of RSA were using broken sources of entropy, but it's not the same as "Bob always uses his address as his password" which has no entropy.
- betterunix 13y agoOK, sure, but if you want something more to do with ciphertexts than with key generation, consider this: "textbook" RSA is not secure. The reason is that the "textbook" RSA algorithm is not randomized; that is also the reason why so much effort has gone into randomized padding schemes like this: https://en.wikipedia.org/wiki/OAEP https://en.wikipedia.org/wiki/OAEP