作者: Atsushi Takayasu , Noboru Kunihiro
DOI: 10.1007/978-3-642-39059-3_9
关键词:
摘要: At CaLC 2001, Howgrave-Graham proposed the polynomial time algorithm for solving univariate linear equations modulo an unknown divisor of a known composite integer, so-called partially approximate common problem. So far, two forms multivariate generalizations problem have been considered in context cryptanalysis. The first is simultaneous modular equations, whose was at ANTS 2012 by Cohn and Heninger. second Asiacrypt 2008 Herrmann May. Both algorithms cover Howgrave-Graham’s cases. On other hand, both problems also become identical to asymptotic cases root bounds. However, former do not such In this paper, we introduce strategy natural constructions that take into account sizes We work out selection polynomials constructing lattices. Our are superior all attacks solve can generalize case arbitrary number variables. achieve better cryptanalytic bounds some applications relate RSA cryptosystems.