ECCC-Report TR00-040https://eccc.weizmann.ac.il/report/2000/040Comments and Revisions published for TR00-040en-usThu, 22 Jun 2000 14:21:02 +0300
Paper TR00-040
| Security of the Most Significant Bits of the Shamir Message Passing Scheme |
Maria Isabel Gonzalez Vasco,
Igor E. Shparlinski
https://eccc.weizmann.ac.il/report/2000/040Boneh and Venkatesan have recently proposed a polynomial time
algorithm for recovering a ``hidden'' element $\alpha$ of a
finite field $\F_p$ of $p$ elements from rather short
strings of the most significant bits of the remainder
mo\-du\-lo $p$ of $\alpha t$ for several values of $t$ selected uniformly
at random from $\F_p^*$. Unfortunately the applications to the
computational security of most significant bits
of private keys of some finite field exponentiation based cryptosystems
given by Boneh and Venkatesan are not quite correct. For the Diffie-Hellman
cryptosystem the
result of Boneh and Venkatesan has been corrected and
generalized in our recent paper by Gonz{\'a}lez Vasco and Shparlinski.
Here a similar analysis is given for the Shamir message passing scheme.
The results depend on some bounds
of exponential sums.
Thu, 22 Jun 2000 14:21:02 +0300https://eccc.weizmann.ac.il/report/2000/040