Thursday, 11 April 2013

discrete mathematics - Proving Wiener's attack on RSA: help understanding what is meant by a "classic approximation relation"?



I am researching Wiener's attack on the RSA cryptosystem. The theorem, found here beginning on page 4, is as follows:



Let N=pq with q<p<2q. Let d<13N14. Given (e,N) with ed=1mod, a malicious attacker can efficiently recover d.



I am stuck near the very end of the proof:



\left|\frac{e}{N} - \frac{k}{d}\right| \leq \frac{1}{d\sqrt[4]{N}} < \frac{1}{2d^2}.




This is followed by the statement "This is a classic approximation relation. The number of fractions \frac{k}{d} with $dclosely is bounded by log_2 N."



I don't understand what is meant by classic approximation relation, nor where the bound log_2 N, comes from. Could anyone help?


Answer



By Legendre's theorem in Diophantine approximations, if |\alpha - \frac{k}{d}|< \frac{1}{2d^2}, then k/d has to be a convergent p_m/q_m of continued fraction expansion of \alpha. Since the denominators q_m grow exponentially (q_m \geq F_m, where F_m is m-th Fibonacci number), there are less then \log_2 N convergents (i.e. candidates for k/d) with $k

No comments:

Post a Comment

real analysis - How to find lim_{hrightarrow 0}frac{sin(ha)}{h}

How to find \lim_{h\rightarrow 0}\frac{\sin(ha)}{h} without lhopital rule? I know when I use lhopital I easy get $$ \lim_{h\rightarrow 0}...