Let’s have N1=pa where p a prime number and a a natural number. If we want to find all numbers from 1−N1 which are not divisible by p we have to subtract all multiples of p from N1. The multiples are 1p,2p,...pa−1p. From this we conclude that the numbers not divisible by p are pa−pa−1 or N1−N1/p. Let’s have the product of two primes paqb=N2 where b a natural number. Now we have to find which numbers from 1−N2 are not divisible by p,q. In order to do so we have to subtract from N2 the multiples N2/p and N2/q. Now we have (N2−N2/p)−N2/q, but some numbers are multiples of pq. We can subtract these multiples from N2/p or N2/q. Let’s subtract them from N2/q, giving N2/q−N2/pq. The last result has to be subtracted from the first term (N2−N2/p). So we have (N2−N2/p)−(N2/q−N2/pq)=F(N2). So the number F(N2) is counting the numbers from 1−N2 which are not divisible by p,q,pq.
We obtain the second term by applying the ABROZ technique. This works as follows: we multiply the first term by 1/q and we obtain(N2−N2/p)1/q=(N2/q−N2/pq). Let’s have N3=paqbfc where f a prime number and c a natural number. We know how to get the first two terms and now have to obtain the third term which contains the multiples of f.
We again apply the technique, multiplying the two terms by 1/f.
So we have (N3−N3/p)−(N3/q−N3/pq)1/f=N3/f−N3/pf−N3/qf−N3/pqf.
To find F(N3) we subtract from the two terms the third term.
So we have: F(N3)=(N3−N3/p)−(N3/q−N3/pq)−(N3/f−N3/pf−N3/qf−N3/pqf).
We can continue this process indefinitely. The last equation can also be written as F(N3)=N3[1−1/p−1/q+1/pq−1/f+1/pf+1/qf−1/pqf]. The result inside the bracket can be obtained by multiplication of the three primes as follows:
(1−1/p)(1−1/q)(1−1/f)=[1−1/p−1/q+1/pq−1/f+1/pf+1/qf−1/pqf].
So we have F(N3)=N3(1−1/p)(1−1/q)(1−1/f).
We can make keys whenF(N)/N is minimum or maximum.
My first question is: when is it easier to attack RSA, when F(N)/N is minimum or maximum? Secondly, in what other areas of mathematics can we apply the maximum and minimum ratios?
Answer
F(N) doesn't have a maximum (for N>1), and it doesn't have a minimum. It can be made arbitrarily close to, but not equal to, zero, and it can be made arbitrarily close to, but not equal to, one. As Yuval suggests, RSA implementations are usually taken with N=pq with p and q large primes, and this will lead to F(N) close to one.
No comments:
Post a Comment