January 8, 2002
Practical Aspects of Modern Cryptography
The Hastad Attack
•Given
• E1(x) = x3 mod n1
• E2(x) = x3 mod n2
• E3(x) = x3 mod n3
• one can easily compute x.