Sciweavers

Share
CRYPTO
2007
Springer

Finding Small Roots of Bivariate Integer Polynomial Equations: A Direct Approach

8 years 9 months ago
Finding Small Roots of Bivariate Integer Polynomial Equations: A Direct Approach
Coppersmith described at Eurocrypt 96 an algorithm for finding small roots of bivariate integer polynomial equations, based on lattice reduction. A simpler algorithm was later proposed in [9], but it was asymptotically less efficient than Coppersmith’s algorithm. In this paper, we describe an analogous simplification but with the same asymptotic complexity as Coppersmith. We illustrate our new algorithm with the problem of factoring RSA moduli with high-order bits known; in practical experiments our method is several orders of magnitude faster than [9]. Key-words: Coppersmith’s theorem, lattice reduction, cryptanalysis.
Jean-Sébastien Coron
Added 07 Jun 2010
Updated 07 Jun 2010
Type Conference
Year 2007
Where CRYPTO
Authors Jean-Sébastien Coron
Comments (0)
books