Skip to main content

All Questions

Filter by
Sorted by
Tagged with
4 votes
3 answers
5k views

modular exponentation for RSA, why is 2^16 + 1 commonly chosen?

I know that the number 216 + 1 is commonly used for RSA, since 0b 1 0000 0000 0000 0001 only contains two 1 bits. Many sites explain that this makes modular exponentiation faster, but I haven't come ...
sj steve's user avatar
4 votes
1 answer
448 views

Density of integers with a large rough divisor

Let $N < 2^a$ be a positive integer chosen uniformly at random. Let $\tilde{N}$ be the result of removing from $N$ all its prime factors less than $2^b$. What is the probability that $\tilde{N}$ is ...
Randomblue's user avatar
  • 2,967
2 votes
0 answers
110 views

How to apply Pohlig Hellman using a very limited set of auxiliary inputs in that case?

So I was reading about Talotti, Paier, and Miculan - ECC’s Achilles’ Heel: Unveiling Weak Keys in Standardized Curves. The underlying idea is to lift the discrete logarithm problem to $\mathrm{prime}−...
user2284570's user avatar
2 votes
0 answers
121 views

How to choose a prime p s.t. n-th cyclotomic polynomial splits into as much as possible irreducible polynomials while p is almost constant size?

The reason I ask this question is that cyclotomic polynomial is critical to the construction of lattice-based cryptography. In most of the existing lattice-based cryptographic schemes, $n$ is usually ...
user67451's user avatar