On the Insecurity of a Server-Aided RSA Protocol

Abstract. At Crypto ’88, Matsumoto, Kato and Imai proposed a protocol, known as RSA-S1, in which a smart card computes an RSA signature, with the help of an untrusted powerful server. There exist two kinds of attacks against such protocols: passive attacks (where the server does not deviate from the protocol) and active attacks (where the server may return false values). Pfitzmann and Waidner presented at Eurocrypt ’92 a passive meet-in-the-middle attack and a few active attacks on RSA

• Type: Conference
• Year: 2001
• Where: ASIACRYPT
• Authors: Phong Q. Nguyen, Igor Shparlinski
• Keywords: Active Attacks, ASIACRYPT 2001, Cryptology, RSA Signature, Untrusted Powerful Server