RSA

Papers
- A Method for Obtaining Digital Signatures and Public-Key Cryptosystems (Rivest, Shamir, Adleman, 1978)
- RSA Signing
  - The Exact Security of Digital Signatures How to Sign with RSA and Rabin ( Mihir Bellare, Phillip Rogaway, 1996)
Provable security
- OAEP
  - A New Suggestion for How to Encrypt with RSA (Mihir Bellare, Phillip Rogaway, 1994)
  - OAEP Reconsidered (Victor Shoup, 2000)
  - RSA-OAEP is Secure under the RSA Assumption (Eiichiro Fujisaki, Tatsuaki Okamoto, David Pointcheval, Jacques Stern, 2001)
@Shared RSA Key Generation
Cryptanalysis
- Surveys
  - Twenty years of attacks on the RSA cryptosystem (Dan Boneh)
- Papers
  - A chosen text attack on the RSA cryptosystem and some discrete logarithm schemes (Desmedt, Odlyzko, Crypto '85)
  - Low-Exponent RSA with Related Messages (Don Coppersmith, Matthew Franklin, Jacques Patarin, Michael Reiter, 1996)
  - Small Solutions to Polynomial Equations, and Low Exponent RSA Vulnerabilities ( Don Coppersmith, JoC 1997)
  - Are `strong' primes needed for RSA? (Ron Rivest, Bob Silverman, 1998)
  - Breaking RSA may not be equivalent to factoring (Dan Boneh, Ramarathnam Venkatesan)
  - An attack on RSA given a small fraction of the private key bits (Dan Boneh, Glenn Durfee, Yair Frankel)
  - Cryptanalysis of RSA with private key d less than N^0.292 (Dan Boneh, Glen Durfee)
  - Cryptanalysis of Unbalanced RSA with Small CRT-Exponent (Alexander May, Crypto 2002)
  - New Attacks on RSA with Small Secret CRT-Exponents (David Bleichenbacher, Alex May, PKC 2006)
- Special Hardware for Cryptanalysis
  - Twinkle
    - Questions and Answers: Shamir's Factoring Device and RSA
- @Factoring
Usages
- Batch RSA (A. Fiat, JoC 1997)
Theses
- Security Analysis of RSA-type Cryptosystems (Marc Joye, PhD Thesis, 1997)
- Public Key Cryptanalysis Using Algebraic and Lattice Methods (Glenn Durfee, PhD thesis, Stanford, 2002)
- New RSA Vulnerabilities Using Lattice Reduction Methods (Alexander May, Paderborn, PhD thesis, 2003)
- On the Difficulty of Prime Root Computation in Certain Finite Cyclic Groups (Anna M. Johnston, Royal Holloway, PhD thesis, 2006)
export-a-crypto-system sig
Implementations
- Fast Implementations of RSA Cryptography (M. Shand, J. Vuillemin, 1993)
Introductions
- RSA simulation with Javacript
- HOWTO: Exploring RSA Encryption (Linux Journal)

Cryptology Pointers by Helger Lipmaa
Got any suggestions or additional links? Mail to <helger.lipmaa>gmail.com
NB! If you find any broken links, please be kind and report them to me together with their current location!

(C) Helger Lipmaa 1997-2009.