Dan Boneh had an interesting paper on this topic a few years back
giving some evidence that that "breaking RSA" might in fact be easier
than factoring. However, it defines "breaking RSA" as being able
to DO the private-key operation, not as knowing the private key
(because the latter lets you factor).
Boneh and Venkatesan. "Breaking RSA may not be equivalent to
factoring." Eurocrypt '98. Springer-Verlag LNCS 1233. 1998.
--Sean
Sean W. Smith, Ph.D. [EMAIL PROTECTED] www.cs.dartmouth.edu/~sws/
Department of Computer Science, Dartmouth College, Hanover NH USA
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PROTECTED]
