3 ms·
The attack seems to be based on the arbitrary assumption that e=3. Isn't e always a huge number in practice?
by miloshh 17y ago
The attack seems to be based on the arbitrary assumption that e=3. Isn't e always a huge number in practice?
- sid0 17y agoYes. 65537 is commonly used.
- NateLawson 17y agoThe lower your public exponent in RSA, the faster you can verify signatures. So e=3 is still used quite often in embedded applications. It can be secure if used properly, but for most cases, it is safer to use 65537 as that can protect you from actual exploitation even if you have a variety of implementation bugs.