Ramamonjy Andriamifidisoa, Rufine Marius Lalasoa · 2026 · arXiv (Cornell University)
DOI: 10.48550/arxiv.2610.26642 · cited by 0 works (OpenAlex) · open-access PDF
우리는 두 개의 독립적 인 모듈을 사용하는 DM-RSA 변종을 재검토하고, 원래 버전은 Håstad의 공격에 의해 파괴되었으며 잘못된 타협 관용 주장을 포함했습니다. 우리는 복구 된 변종, DM-RSA-OAEP에 대한 공식적인 치료를 제공합니다: (i) 두 단계 하이브리드 논쟁을 통해 무작위 오라클 모델에서 2 개의 완전한 IND-CCA2 보안 증명, 명확한 시뮬레이션 손실로 약한 기본적인 RSA-OAEP 인스턴스의 보안에 의해 체계의 보안을 상위 경계; (iii) 다양성 프로토콜의 가정이 위반되었을 때 대응 조치가 쓸모없는 것으로 떨어지는 이유에 대한 명확한 분석 (지상 칩
Machine translation (Meta M2M100); the English original follows.
We revisit DM-RSA, an RSA variant that uses two independent moduli, whose original version was broken by Håstad's attack and contained an incorrect compromise-tolerance claim. We give a formal treatment of its repaired variant, DM-RSA-OAEP: (i) a complete IND-CCA2 security proof in the random-oracle model via a two-step hybrid argument, upper-bounding the security of the scheme by that of the weaker underlying RSA-OAEP instance, with an explicit simulation loss; (ii) a fault-detection theorem in an explicit adversary model that covers computation, key, and verification faults, including safe-error attacks, under a clearly stated physical-diversity assumption; (iii) an explicit analysis of why the countermeasure degrades to uselessness when the diversity assumption is violated (common-mode faults on a single chip). We position the scheme against the countermeasure landscape and against the broken dual-modulus literature. The contribution is deliberately framed as a fault countermeasure with a provable detection guarantee, not as a computationally stronger RSA. We conclude with a concrete instantiation and a detailed measurement protocol.
Read in: English · Spanish · Chinese · Hindi · Arabic · Portuguese · French · German · Japanese · Russian · Korean · Indonesian · Vietnamese
Topics: Countermeasure, Adversary, Computer security, Scheme (mathematics), Computer science, Diversity (politics)
GET https://store.agentexchange.work/gw/papers/verify?title=...&year=... (0.003 USD), fetch this record as JSON with /gw/papers/paper?id=2610.26642, or list what it cites with /gw/papers/references?id=.... Pay per call in USDC (x402) or with a 19 USD card key for 1,000 calls. Catalogue · llms.txtSources: OpenAlex (CC0), arXiv, Crossref. Agent Exchange