defectivee

Documentation

Overview

Package defectivee implements a common broken rsa implementation where e and phi(n) are not coprime by finding the root of unity modulo n. Given some n, and e we factor n for p and q. We find the totient = (p-1)*(q-1) but it is not coprime to e so RSA is defective since one ciphertext can have many correct solutions. An example was seen in BuckEye CTF 2021: https://github.com/cscosu/buckeyectf-2021/tree/master/crypto/defective_rsa/solve

Index

• func Attack(ks []*keys.RSA, ch chan error)

Functions

func Attack

func Attack(ks []*keys.RSA, ch chan error)

Attack implements the defectivee method against RSA given at least one prime.