Attacks on RSA

Finding out someone's private d is probably as hard as factoring n.  But sometimes we can find out a particular message without breaking the general code.  Usually this is because e is too small --- small e makes the encrypting faster, but can weaken security.

Small message attack

Next Section