TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

[Crypto] Is the limited set of exponents (e) in RSA a backdoor?

8 点作者 zyad超过 11 年前
Why only {3, 5, 17, 257, 65537}? Some says it's for performance reasons(Fermat primes). Is it a possibility that some sort of "rainbow tables" have been computed for these values ?

1 comment

saurik超过 11 年前
They are primes of low hamming weight, so the exponentiationd you have to do are cheaper (imagine a multiplication, long hand, where almost all of the digits are 0: that really helps). You actually don't want a small exponent, as it will fail to saturate the modulus (so please, don't use 3, that is a well-known bad thing to do with RSA). As for a "rainbow table", that is a concept that only applies to hashes; if you just mean a full lookup table, the time complexity of attacking RSA directly comes from the modulus, not the exponent.
评论 #6428448 未加载