A security analysis of two classes of RSA-like cryptosystems
Paul Cotan, George Teşeleanu · Journal of Mathematical Cryptology · 2024
Abstract Let N = p q N=pq be the product of two balanced prime numbers p p and q q . In Elkamchouchi et al. ( Extended RSA cryptosystem and digital signature schemes in the domain of Gaussian integers . In: ICCS 2002. vol. 1. IEEE Computer Society; 2002. p. 91–5.) introduced an Rivest-Shamir-Adleman (RSA)-like cryptosystem that uses the key equation e d − k ( p 2 − 1 ) ( q 2 − 1 ) = 1 ed-k\left({p}^{2}-1)\left({q}^{2}-1)=1 , instead of the classical RSA key equation e d − k ( p − 1 ) ( q − 1 ) = 1 ed-k\left(p-1)\left(q-1)=1 . Another variant of RSA, presented in Murru and Saettone ( A novel RSA-like cryptosystem based on a generalization of the Rédei rational functions . In: NuTMiC 2017. vol. 10737 of Lecture Notes in Computer Science. Springer; 2017. p. 91–103), uses the key equation e d − k ( p 2 + p + 1 ) ( q 2 + q + 1 ) = 1 ed-k\left({p}^{2}+p+1)\left({q}^{2}+q+1)=1 . Despite the authors’ claims of enhanced security, both schemes remain vulnerable to adaptations of common RSA attacks. Let n n be an integer. This article proposes two families of RSA-like encryption schemes: one employs the key equation e d − k ( p