Advertisement
Published in:
2000 | OriginalPaper | Chapter
Why Textbook ElGamal and RSA Encryption Are Insecure
Extended Abstract
Authors : Dan Boneh, Antoine Joux, Phong Q. Nguyen
Published in: Advances in Cryptology — ASIACRYPT 2000
Publisher: Springer Berlin Heidelberg
Included in: Professional Book Archive
Activate our intelligent search to find suitable subject content or patents.
Select sections of text to find matching patents with Artificial Intelligence. powered by
Select sections of text to find additional relevant content using AI-assisted search. powered by
We present an attack on plain ElGamal and plain RSA encryption. The attack shows that without proper preprocessing of the plaintexts, both El Gamal and RSA encryption are fundamentally insecure. Namely, when one uses these systems to encrypt a (short) secret key of a symmetric cipher it is often possible to recover the secret key from the ciphertext. Our results demonstrate that preprocessing messages prior to encryption is an essential part of bothsy stems.