DOI: 10.1007/978-3-540-74143-5_21
关键词:
摘要: Coppersmith described at Eurocrypt 96 an algorithm for finding small roots of bivariate integer polynomial equations, based on lattice reduction. A simpler was later proposed in [9], but it asymptotically less efficient than Coppersmith's algorithm. In this paper, we describe analogous simplification with the same asymptotic complexity as Coppersmith. We illustrate our new problem factoring RSA moduli high-order bits known; practical experiments method is several orders magnitude faster [9].