Question: Collision - Resistant Hashing from RSA ( 2 5 pts ) Let N = pq be an RSA modulus and take e in N to
CollisionResistant Hashing from RSA pts Let N pq be an RSA modulus and take e in N to be a prime that is also relatively prime to phi N Let u $ Z N and define the hash function HNeu : Z N times e Z N where HNeuxy xeuy in Z N In this problem, we will show that under the RSA assumption, HNeu defined above is collision resistant. Namely, suppose there is an efficient adversary A that takes as input Neu and outputs xyxy such that HNeuxy HNeuxy We will use A to construct an efficient adversary B that takes as input Neu where u $ Z N and outputs x such that xe u in Z Napts Show that using algorithm A defined above, algorithm B can efficiently compute a in ZN and b in Z such that ae ub mod N and b e Remember to argue why any inverses you compute will exist. bpts Usetheabove relation to show how B can efficiently compute x in ZN suchthat xe u Note that B does not know the factorization of N so B cannot compute bmod phi N Hint: What is gcdbe
Step by Step Solution
There are 3 Steps involved in it
1 Expert Approved Answer
Step: 1 Unlock
Question Has Been Solved by an Expert!
Get step-by-step solutions from verified subject matter experts
Step: 2 Unlock
Step: 3 Unlock
