Errors Matter: Breaking RSA-Based PIN Encryption with Thirty Ciphertext Validity Queries

Nigel Smart

Errors Matter: Breaking RSA-Based PIN Encryption with Thirty Ciphertext Validity Queries

Nigel Smart

Research output: Chapter in Book/Report/Conference proceeding › Conference Contribution (Conference Proceeding)

4 Citations (Scopus)

Abstract

We show that one can recover the PIN from a standardized RSA-based PIN encryption algorithm from a small number of queries to a ciphertext validity checking oracle. The validity checking oracle required is rather special and we discuss whether such oracles could be obtained in the real world. Our method works using a minor extension to the ideas of Bleichenbacher and Manger, in particular we obtain information from negative, as well as positive, responses from the validity checking oracle.

Translated title of the contribution	Errors Matter: Breaking RSA-Based PIN Encryption with Thirty Ciphertext Validity Queries
Original language	English
Title of host publication	Topics in Cryptology - CT-RSA 2010
Publisher	Springer Berlin Heidelberg
Pages	15-25
Volume	5985
Publication status	Published - 2010

Bibliographical note

ISBN: 9783642119248
Publisher: Springer Verlag LNCS 5985
Name and Venue of Conference: Topics in Cryptology - CT-RSA 2010
Other identifier: 2001153

Access to Document

http://www.cs.bris.ac.uk/Publications/pub_master.jsp?id=2001153

Handle.net

Persistent link

Cite this

@inproceedings{517805df469e4e23b99d145bb7b51dad,

title = "Errors Matter: Breaking RSA-Based PIN Encryption with Thirty Ciphertext Validity Queries",

abstract = "We show that one can recover the PIN from a standardized RSA-based PIN encryption algorithm from a small number of queries to a ciphertext validity checking oracle. The validity checking oracle required is rather special and we discuss whether such oracles could be obtained in the real world. Our method works using a minor extension to the ideas of Bleichenbacher and Manger, in particular we obtain information from negative, as well as positive, responses from the validity checking oracle. ",

author = "Nigel Smart",

note = "ISBN: 9783642119248 Publisher: Springer Verlag LNCS 5985 Name and Venue of Conference: Topics in Cryptology - CT-RSA 2010 Other identifier: 2001153",

year = "2010",

language = "English",

volume = "5985",

pages = "15--25",

booktitle = "Topics in Cryptology - CT-RSA 2010",

publisher = "Springer Berlin Heidelberg",

address = "Germany",

}

TY - GEN

T1 - Errors Matter: Breaking RSA-Based PIN Encryption with Thirty Ciphertext Validity Queries

AU - Smart, Nigel

N1 - ISBN: 9783642119248 Publisher: Springer Verlag LNCS 5985 Name and Venue of Conference: Topics in Cryptology - CT-RSA 2010 Other identifier: 2001153

PY - 2010

Y1 - 2010

N2 - We show that one can recover the PIN from a standardized RSA-based PIN encryption algorithm from a small number of queries to a ciphertext validity checking oracle. The validity checking oracle required is rather special and we discuss whether such oracles could be obtained in the real world. Our method works using a minor extension to the ideas of Bleichenbacher and Manger, in particular we obtain information from negative, as well as positive, responses from the validity checking oracle.

AB - We show that one can recover the PIN from a standardized RSA-based PIN encryption algorithm from a small number of queries to a ciphertext validity checking oracle. The validity checking oracle required is rather special and we discuss whether such oracles could be obtained in the real world. Our method works using a minor extension to the ideas of Bleichenbacher and Manger, in particular we obtain information from negative, as well as positive, responses from the validity checking oracle.

M3 - Conference Contribution (Conference Proceeding)

VL - 5985

SP - 15

EP - 25

BT - Topics in Cryptology - CT-RSA 2010

PB - Springer Berlin Heidelberg

ER -

Errors Matter: Breaking RSA-Based PIN Encryption with Thirty Ciphertext Validity Queries

Abstract

Bibliographical note

Access to Document

Handle.net

Fingerprint

Cite this