Decrypting Multi-Prime RSA with e, N, and factors of N givenWhat makes RSA secure by using prime numbers?Knowing N and a relationship between the 2 prime numbers(p and q) find p and q generated with RSACan multi-prime RSA be used to create an abuse-resistant lawful interception mechanism?What's wrong with RSA and OpenSSL?Is it possible to check if a number is the product of two primes without factorizing it?

Why is Trump releasing or not of his taxes such a big deal?

Can you use a virtual credit card to withdraw money from an ATM in the UK?

How to treat unhandled exceptions? (Terminate the application vs. Keep it alive)

Remove last letter 4 times, get a real word each time, starting word is a car model

Translation of: 美しいと思ってしまったのだ

How to snip same part of screen as last time?

Does a restocking fee still qualify as a business expense?

How do you handle simultaneous damage when one type is absorbed and not the other?

Unexpected exec permission from mmap when assembly files included in the project

If we should encrypt the message rather than the method of transfer, why do we care about wifi security? Is this just security theatre?

How do I copy an installed steam game on my PC to an external hard drive?

Do more Americans want the Bidens investigated than Trump impeached?

Meaning of 'pound' in "felt a fury that was not his own pound through his body"

Is it safe to pay bills over satellite internet?

Easy way of generating a 50-150W load @12V

What are the branches of statistics?

What is the gold linker?

Which culture used no personal names?

Accidental duration in measureless music

Are there 99 percentiles, or 100 percentiles? And are they groups of numbers, or dividers or pointers to individual numbers?

Find number 8 with the least number of tries

How do I reset the TSA-unlocked indicator on my lock?

How to prove that invoices are really unpaid?

Does my protagonist need to be the most important character?



Decrypting Multi-Prime RSA with e, N, and factors of N given


What makes RSA secure by using prime numbers?Knowing N and a relationship between the 2 prime numbers(p and q) find p and q generated with RSACan multi-prime RSA be used to create an abuse-resistant lawful interception mechanism?What's wrong with RSA and OpenSSL?Is it possible to check if a number is the product of two primes without factorizing it?






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty
margin-bottom:0;

.everyonelovesstackoverflowposition:absolute;height:1px;width:1px;opacity:0;top:0;left:0;pointer-events:none;








1














$begingroup$


I was wondering if there was any way to compute the private key $d$ when knowing only $e$ and $N$, and being able to factor $N$ as 4 prime numbers $p, q, r$ and $s$. I've been searching for days and I can't find any way.










share|improve this question









New contributor



Dominic is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






$endgroup$















  • $begingroup$
    "being able to factor $N$ as 4 prime numbers $p, q, r$ and $s$" - does this mean that you know/can find the values of $p, q, r, s$, or merely that you know that $N$ has 4 factors?
    $endgroup$
    – Ella Rose
    8 hours ago










  • $begingroup$
    I have found p, q, r and s. But I have no clue what way to go next. I've tried calculating the totient but I don't think that's the good way because I didn't get the answer I wanted.
    $endgroup$
    – Dominic
    8 hours ago










  • $begingroup$
    Thank you!! I will try it
    $endgroup$
    – Dominic
    8 hours ago






  • 3




    $begingroup$
    @fgrieu: that sounds like an answer; why don't you post it as one...
    $endgroup$
    – poncho
    7 hours ago

















1














$begingroup$


I was wondering if there was any way to compute the private key $d$ when knowing only $e$ and $N$, and being able to factor $N$ as 4 prime numbers $p, q, r$ and $s$. I've been searching for days and I can't find any way.










share|improve this question









New contributor



Dominic is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






$endgroup$















  • $begingroup$
    "being able to factor $N$ as 4 prime numbers $p, q, r$ and $s$" - does this mean that you know/can find the values of $p, q, r, s$, or merely that you know that $N$ has 4 factors?
    $endgroup$
    – Ella Rose
    8 hours ago










  • $begingroup$
    I have found p, q, r and s. But I have no clue what way to go next. I've tried calculating the totient but I don't think that's the good way because I didn't get the answer I wanted.
    $endgroup$
    – Dominic
    8 hours ago










  • $begingroup$
    Thank you!! I will try it
    $endgroup$
    – Dominic
    8 hours ago






  • 3




    $begingroup$
    @fgrieu: that sounds like an answer; why don't you post it as one...
    $endgroup$
    – poncho
    7 hours ago













1












1








1





$begingroup$


I was wondering if there was any way to compute the private key $d$ when knowing only $e$ and $N$, and being able to factor $N$ as 4 prime numbers $p, q, r$ and $s$. I've been searching for days and I can't find any way.










share|improve this question









New contributor



Dominic is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.






$endgroup$




I was wondering if there was any way to compute the private key $d$ when knowing only $e$ and $N$, and being able to factor $N$ as 4 prime numbers $p, q, r$ and $s$. I've been searching for days and I can't find any way.







rsa multi-prime-rsa






share|improve this question









New contributor



Dominic is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.










share|improve this question









New contributor



Dominic is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.








share|improve this question




share|improve this question



share|improve this question








edited 5 hours ago









kelalaka

11.2k3 gold badges29 silver badges55 bronze badges




11.2k3 gold badges29 silver badges55 bronze badges






New contributor



Dominic is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.








asked 8 hours ago









DominicDominic

61 bronze badge




61 bronze badge




New contributor



Dominic is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.




New contributor




Dominic is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
















  • $begingroup$
    "being able to factor $N$ as 4 prime numbers $p, q, r$ and $s$" - does this mean that you know/can find the values of $p, q, r, s$, or merely that you know that $N$ has 4 factors?
    $endgroup$
    – Ella Rose
    8 hours ago










  • $begingroup$
    I have found p, q, r and s. But I have no clue what way to go next. I've tried calculating the totient but I don't think that's the good way because I didn't get the answer I wanted.
    $endgroup$
    – Dominic
    8 hours ago










  • $begingroup$
    Thank you!! I will try it
    $endgroup$
    – Dominic
    8 hours ago






  • 3




    $begingroup$
    @fgrieu: that sounds like an answer; why don't you post it as one...
    $endgroup$
    – poncho
    7 hours ago
















  • $begingroup$
    "being able to factor $N$ as 4 prime numbers $p, q, r$ and $s$" - does this mean that you know/can find the values of $p, q, r, s$, or merely that you know that $N$ has 4 factors?
    $endgroup$
    – Ella Rose
    8 hours ago










  • $begingroup$
    I have found p, q, r and s. But I have no clue what way to go next. I've tried calculating the totient but I don't think that's the good way because I didn't get the answer I wanted.
    $endgroup$
    – Dominic
    8 hours ago










  • $begingroup$
    Thank you!! I will try it
    $endgroup$
    – Dominic
    8 hours ago






  • 3




    $begingroup$
    @fgrieu: that sounds like an answer; why don't you post it as one...
    $endgroup$
    – poncho
    7 hours ago















$begingroup$
"being able to factor $N$ as 4 prime numbers $p, q, r$ and $s$" - does this mean that you know/can find the values of $p, q, r, s$, or merely that you know that $N$ has 4 factors?
$endgroup$
– Ella Rose
8 hours ago




$begingroup$
"being able to factor $N$ as 4 prime numbers $p, q, r$ and $s$" - does this mean that you know/can find the values of $p, q, r, s$, or merely that you know that $N$ has 4 factors?
$endgroup$
– Ella Rose
8 hours ago












$begingroup$
I have found p, q, r and s. But I have no clue what way to go next. I've tried calculating the totient but I don't think that's the good way because I didn't get the answer I wanted.
$endgroup$
– Dominic
8 hours ago




$begingroup$
I have found p, q, r and s. But I have no clue what way to go next. I've tried calculating the totient but I don't think that's the good way because I didn't get the answer I wanted.
$endgroup$
– Dominic
8 hours ago












$begingroup$
Thank you!! I will try it
$endgroup$
– Dominic
8 hours ago




$begingroup$
Thank you!! I will try it
$endgroup$
– Dominic
8 hours ago




3




3




$begingroup$
@fgrieu: that sounds like an answer; why don't you post it as one...
$endgroup$
– poncho
7 hours ago




$begingroup$
@fgrieu: that sounds like an answer; why don't you post it as one...
$endgroup$
– poncho
7 hours ago










1 Answer
1






active

oldest

votes


















4
















$begingroup$

In multi-prime RSA, with the factorization of $N$ into primes $p$, $q$, $r$, $s$ known, computing $d$ can be done as usual, e.g.$$dgets e^-1bmodoperatornamelcm(p-1,q-1,r-1,s-1)$$or$$dgets e^-1bmod((p-1)(q-1)(r-1)(s-1))$$



Note: the rationale of using multi-prime RSA is to obtain speedups that require not using $d$; but using $d$ will work anyway, only slower.






share|improve this answer












$endgroup$
















    Your Answer








    StackExchange.ready(function()
    var channelOptions =
    tags: "".split(" "),
    id: "281"
    ;
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function()
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled)
    StackExchange.using("snippets", function()
    createEditor();
    );

    else
    createEditor();

    );

    function createEditor()
    StackExchange.prepareEditor(
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: false,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: null,
    bindNavPrevention: true,
    postfix: "",
    imageUploader:
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/4.0/"u003ecc by-sa 4.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    ,
    noCode: true, onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    );



    );







    Dominic is a new contributor. Be nice, and check out our Code of Conduct.









    draft saved

    draft discarded
















    StackExchange.ready(
    function ()
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fcrypto.stackexchange.com%2fquestions%2f74891%2fdecrypting-multi-prime-rsa-with-e-n-and-factors-of-n-given%23new-answer', 'question_page');

    );

    Post as a guest















    Required, but never shown


























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    4
















    $begingroup$

    In multi-prime RSA, with the factorization of $N$ into primes $p$, $q$, $r$, $s$ known, computing $d$ can be done as usual, e.g.$$dgets e^-1bmodoperatornamelcm(p-1,q-1,r-1,s-1)$$or$$dgets e^-1bmod((p-1)(q-1)(r-1)(s-1))$$



    Note: the rationale of using multi-prime RSA is to obtain speedups that require not using $d$; but using $d$ will work anyway, only slower.






    share|improve this answer












    $endgroup$



















      4
















      $begingroup$

      In multi-prime RSA, with the factorization of $N$ into primes $p$, $q$, $r$, $s$ known, computing $d$ can be done as usual, e.g.$$dgets e^-1bmodoperatornamelcm(p-1,q-1,r-1,s-1)$$or$$dgets e^-1bmod((p-1)(q-1)(r-1)(s-1))$$



      Note: the rationale of using multi-prime RSA is to obtain speedups that require not using $d$; but using $d$ will work anyway, only slower.






      share|improve this answer












      $endgroup$

















        4














        4










        4







        $begingroup$

        In multi-prime RSA, with the factorization of $N$ into primes $p$, $q$, $r$, $s$ known, computing $d$ can be done as usual, e.g.$$dgets e^-1bmodoperatornamelcm(p-1,q-1,r-1,s-1)$$or$$dgets e^-1bmod((p-1)(q-1)(r-1)(s-1))$$



        Note: the rationale of using multi-prime RSA is to obtain speedups that require not using $d$; but using $d$ will work anyway, only slower.






        share|improve this answer












        $endgroup$



        In multi-prime RSA, with the factorization of $N$ into primes $p$, $q$, $r$, $s$ known, computing $d$ can be done as usual, e.g.$$dgets e^-1bmodoperatornamelcm(p-1,q-1,r-1,s-1)$$or$$dgets e^-1bmod((p-1)(q-1)(r-1)(s-1))$$



        Note: the rationale of using multi-prime RSA is to obtain speedups that require not using $d$; but using $d$ will work anyway, only slower.







        share|improve this answer















        share|improve this answer




        share|improve this answer



        share|improve this answer








        edited 5 hours ago









        kelalaka

        11.2k3 gold badges29 silver badges55 bronze badges




        11.2k3 gold badges29 silver badges55 bronze badges










        answered 7 hours ago









        fgrieufgrieu

        86.4k7 gold badges192 silver badges378 bronze badges




        86.4k7 gold badges192 silver badges378 bronze badges
























            Dominic is a new contributor. Be nice, and check out our Code of Conduct.









            draft saved

            draft discarded

















            Dominic is a new contributor. Be nice, and check out our Code of Conduct.












            Dominic is a new contributor. Be nice, and check out our Code of Conduct.











            Dominic is a new contributor. Be nice, and check out our Code of Conduct.














            Thanks for contributing an answer to Cryptography Stack Exchange!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid


            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.

            Use MathJax to format equations. MathJax reference.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function ()
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fcrypto.stackexchange.com%2fquestions%2f74891%2fdecrypting-multi-prime-rsa-with-e-n-and-factors-of-n-given%23new-answer', 'question_page');

            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown









            Popular posts from this blog

            Invision Community Contents History See also References External links Navigation menuProprietaryinvisioncommunity.comIPS Community ForumsIPS Community Forumsthis blog entry"License Changes, IP.Board 3.4, and the Future""Interview -- Matt Mecham of Ibforums""CEO Invision Power Board, Matt Mecham Is a Liar, Thief!"IPB License Explanation 1.3, 1.3.1, 2.0, and 2.1ArchivedSecurity Fixes, Updates And Enhancements For IPB 1.3.1Archived"New Demo Accounts - Invision Power Services"the original"New Default Skin"the original"Invision Power Board 3.0.0 and Applications Released"the original"Archived copy"the original"Perpetual licenses being done away with""Release Notes - Invision Power Services""Introducing: IPS Community Suite 4!"Invision Community Release Notes

            Canceling a color specificationRandomly assigning color to Graphics3D objects?Default color for Filling in Mathematica 9Coloring specific elements of sets with a prime modified order in an array plotHow to pick a color differing significantly from the colors already in a given color list?Detection of the text colorColor numbers based on their valueCan color schemes for use with ColorData include opacity specification?My dynamic color schemes

            Ласкавець круглолистий Зміст Опис | Поширення | Галерея | Примітки | Посилання | Навігаційне меню58171138361-22960890446Bupleurum rotundifoliumEuro+Med PlantbasePlants of the World Online — Kew ScienceGermplasm Resources Information Network (GRIN)Ласкавецькн. VI : Літери Ком — Левиправивши або дописавши її