Abstract
We introduce a hypothetical situation in which low-exponent RSA is used to encrypt IP packets, TCP segments, or TCP segments carried in IP packets. In this scenario, we explore how the Coppersmith/ Howgrave-Graham method can be used, in conjunction with the TCP and IP protocols, to decrypt specific packets when they get retransmitted (due to a denial-of-service attack on the receiver’s side). We drawconclusions on the applicability of the Coppersmith/Howgrave- Graham method, its interaction with “guessing”, and the difficulties of building a secure system by combining well-known building blocks.
| Original language | English |
|---|---|
| Pages | 329--338 |
| Number of pages | 10 |
| DOIs | |
| Publication status | Published - Dec 2001 |
| Event | Proceedings 8th. IMA Conf. Cryptography and Coding - Duration: 1 Dec 2001 → … |
Conference
| Conference | Proceedings 8th. IMA Conf. Cryptography and Coding |
|---|---|
| Period | 1/12/01 → … |
Fingerprint
Dive into the research topics of 'Lattice Attacks on RSA-Encrypted IP and TCP'. Together they form a unique fingerprint.Cite this
- APA
- Standard
- Harvard
- Vancouver
- Author
- BIBTEX
- RIS