Paper 2, Section II, H

Coding \& Cryptography
Part II, 2018

Describe the RSA encryption scheme with public key (N,e)(N, e) and private key dd.

Suppose N=pqN=p q with pp and qq distinct odd primes and 1xN1 \leqslant x \leqslant N with xx and NN coprime. Denote the order of xx in Fp\mathbb{F}_{p}^{*} by Op(x)\mathrm{O}_{p}(x). Further suppose Φ(N)\Phi(N) divides 2ab2^{a} b where bb is odd. If Op(xb)Oq(xb)\mathrm{O}_{p}\left(x^{b}\right) \neq \mathrm{O}_{q}\left(x^{b}\right) prove that there exists 0t<a0 \leqslant t<a such that the greatest common divisor of x2tb1x^{2^{t} b}-1 and NN is a nontrivial factor of NN. Further, prove that the number of xx satisfying Op(xb)Oq(xb)\mathrm{O}_{p}\left(x^{b}\right) \neq \mathrm{O}_{q}\left(x^{b}\right) is Φ(N)/2\geqslant \Phi(N) / 2.

Hence, or otherwise, prove that finding the private key dd from the public key (N,e)(N, e) is essentially as difficult as factoring NN.

Suppose a message mm is sent using the RSA\mathrm{RSA} scheme with e=43e=43 and N=77N=77, and c=5c=5 is the received text. What is mm ?

An integer mm satisfying 1mN11 \leqslant m \leqslant N-1 is called a fixed point if it is encrypted to itself. Prove that if mm is a fixed point then so is NmN-m.