How (not) to Design RSA Signature Schemes

The concept of public-key cryptography was invented in 1976 by Diffie and Hellman [DH]. The following year, Rivest, Shamir and Adleman provided an implementation of this idea [RSA]. The RSA signature, like any other signature, is message-dependent and signer-dependent. Thus, the recipient cannot modify the message and the signer cannot deny the validity of his signature. However, several attacks have appeared since. These attacks do not challenge RSA in itself but only the way to design a signature scheme based on it.

• Type: Conference
• Year: 1998
• Where: PKC
• Authors: Jean-François Misarsky
• Keywords: Cryptology, PKC 1998, Public-Key Cryptography, RSA Signature, Signature Scheme