# 1. The RSA algorithm In this chapter, we ll learn how the RSA algorithm works.

Save this PDF as:

Size: px
Start display at page:

Download "1. The RSA algorithm In this chapter, we ll learn how the RSA algorithm works."

## Transcription

1 MATH 13150: Freshman Seminar Unit The RSA algorithm In this chapter, we ll learn how the RSA algorithm works Bob and Alice. Suppose that Alice wants to send a message to Bob over the internet and she wants to make sure that any hackers who intercept the message will not be able to read it. As is customary in cryptography, she encodes the message using a coding technique, called a key. A new feature is that Bob chooses the coding technique without consulting Alice, and everyone, including the hacker, can know her coding technique. However, Bob has special knowledge which enables him to decode the message. Bob is the only one with this special knowledge, so Bob is the only one who can decode Alice s secret message. As a consequence, Alice cannot decode her own message (not a big deal as long as she kept her original unencoded message). More importantly, a spy named Eve also cannot decode Alice s message. This procedure is called asymmetric (or not symmetric ) because the sender and receiver have different information about the code. This is different from the coding techniques discussed in chapters one through four of the CodeBook, where the sender and receiver have the same information. For example, in the Enigma coding technique, both the sender and receiver have an Enigma machine and the keyword for the day. RSA ALGORITHM: Let s say that Alice wants to send Bob a secret number called a. If Alice can send a single number to Bob, then she can send any combination of numbers, and this means she can send any message she wants. Bob to Alice Message Coming. This is public information. Bob picks two prime numbers p and q and computes their product, N = p q. He also computes φ(n) = φ(p q) = (p 1) (q 1). He chooses a number k which is relatively prime to φ(n). Bob to Alice k, N. This is public information, but the primes p and q are private information, known only to Bob, and anyone who can factor N. Alice computes b a k (mod N). This encodes the secret number a as the new number b. Alice to Bob: b. This is public. Bob knows that b a k (mod N), so he knows that k b a (mod N). So he computes k b (mod N), and he knows this is the secret number that Alice wanted to send him. EXAMPLE: Let s see how this works in a small example. Note that the only mathematical operations going on are computing powers and kth roots in modular arithmetic, and we ve learned how to do them. Suppose Alice wants to send the secret number a = 2 to Bob. Alice to Bob Message Coming. This is public. 1

2 2 Bob chooses p = 3 and q = 11, and computes N = p q = 3 11 = 33. He also computes φ(n) = φ(3 11) = 2 10 = 20. He chooses k = 7, which is OK because gcd(7, 20) = 1. Alice to Bob k=7, N=33. This is public information. Alice computes b 2 7 (mod 33). An easy computation shows that (mod 33), so b = 29. This is the encoded number. Alice to Bob b=29. This is public information. Now Bob knows that b a 7 (mod 33), so 7 b a (mod 33). So he just has to compute 7 29 (mod 33). Let s try that out. We first write 1 as a combination of 7 and 20. A moment s calculation gives 1 = , so (mod 20) and (mod 33), using the general rule on page 3 of Unit 15, which comes from Euler s theorem. Now take the 7th root of each side to get: (mod 33). We compute (mod 33). So Bob knows that the secret number is a = 2, and he has successfully decoded Alice s message. Let s think for a moment about the security of this encoding technique. The secret information that only Bob knows is that p = 3 and q = 11. If a spy is looking at the public information, they will see that N = 33, and they will be able to find p and q by taking the prime factorization of 33. So in this case, the secret message is not very well-protected since 33 is easy to factor. We will see later that if we take p and q to be bigger primes, then the secret message is much better protected. EXAMPLE: Suppose that Alice wants to send to Bob the secret number a = 4 and Bob picks the primes p = 7 and q = 11, and Bob takes k = 17. Then after Alice tells Bob that a message is coming, Bob computes N = 7 11 = 77, and φ(n) = 6 10 = 60. It is OK for Bob to pick k = 17 since gcd(17, 60) = 1. Then Bob sends to Alice k=17, N=77, which is public information. Alice then computes b 4 17 (mod 77), and the modular arithmetic calculator shows that (mod 77), so b = 4. Then Alice sends to Bob the encoded message: b=16, which is public information. To decode the message, Bob has to compute: k b (mod N) (mod 77). Since Bob knows that φ(77) = 60, his first step is to write 1 as a combination of 17 and 60, which he does using the Euclidean algorithm as follows: 60 = = = 8 + 1, and reversing the steps, we find: 1 = 9 8 = 9 (17 9) = , so 1 = 2 ( ) 17 = , so (mod 60), so (mod 60)

3 This implies that: (mod 77) using Euler s theorem, so (mod 77). The modular arithmetic calculator shows that: (mod 77), so Bob knows the secret number was a=4, and Bob has successfully decoded Alice s message The Role of Eve. Now we suppose there is a spy whose name is traditionally Eve. Eve can see all of Alice and Bob s public messages. In this section, we ll see how Eve s job works, and how it is more difficult than Bob s job. We ll do this by looking at a series of problems that illustrate the jobs of each of the three characters. These problems are the same as the format as the problems in the homework, and you will have to do problems of this sort on the final exam. PROBLEM: Alice wants to send a secret number to Bob. If her secret number is a = 7 and Bob sends her k = 5 and N = 51, what should she send Bob? SOLUTION: Alice s task is to compute b a k (mod N), so she computes b 7 5 (mod 51). Since (mod 51), 7 4 ( 2) 2 4 (mod 51), so (mod 51), so Alice should send b=28. This solves the problem. You could also do this using a hand-held calculator for the purposes of an exam. It is even easier to do using the modular arithmetic calculator, but you can t use that on the final exam. PROBLEM: Alice wants to send a secret number to Bob. If her secret number is a = 8 and Bob sends her k = 31 and N = 2701, what should she send Bob? SOLUTION: She should send Bob b (mod 2701). So the answer is b=1176. I did the last problem using the modular arithmetic calculator, and while you could compute 8 31 (mod 2701) using a hand-held calculator, you will not have to do such a long computation on the final exam. NOTE: Alice s job is really easy. PROBLEM: Suppose Bob is receiving a secret message from Alice and he has chosen p = 7, and q = 13, and k = 11. If he receives b=2 from Alice, then what is the secret number she is sending him? SOLUTION: Bob should compute N = 7 13 = 91 and φ(n) = 6 12 = 72. He knows that the secret number a k b (mod N) 11 2 (mod 91). To compute a, he first finds 1 as a combination of 72 and 11 using the Euclidean algorithm. The steps are: 72 = = = 5 + 1, and when we reverse these, we find: 1 = 6 5 = 6 (11 6) = , so 1 = 2 ( ) 11 = , so (mod 72), so since (mod 72),

4 (mod 72). Using the general rule on page 3 of Unit 15 or Euler s theorem, we find: (mod 91), so (mod 91). We compute (mod 91) using the modular arithmetic calculator, so we conclude: (mod 91), so the secret number is a=46. You can check this by computing (mod 91), so a=46 is the secret number. PROBLEM: Suppose Eve sees that Bob told Alice that k=7, N=143 and Alice told Bob that b=6. What is the secret number a that Alice is sending to Bob? SOLUTION: To find a, Eve uses the knowledge that b a 7 (mod 143), to conclude that a 7 6 (mod 143). To compute 7 6 (mod 143), Eve must compute φ(143). To do this, Eve factors 143. Since 143 is about 11.9, Eve tries all primes up to 11. She sees that 2, 3, 5, 7 do not divide 143, but 143 = From this, she knows that φ(143) = = 120. She then writes 1 as a combination of 7 and 120. After a calculation using the Euclidean algorithm, Eve finds that: 1 = , so (mod 120), so since (mod 120), (mod 120). From this, she concludes that (mod 143), so (mod 143). From this, Eve knows that The secret message is a=7. To check this, she computes (mod 143), so she knows her math is correct, and a=7. Eve also decides that Bob is lousy at security, since he picked such an easily factored number as 143. PROBLEM: Suppose Eve sees that Bob told Alice k=17, N=5671 and Alice told Bob that b=4. What is the secret number a that Alice is sending to Bob? SOLUTION: Alice knows that b a 17 (mod 5671), so a 17 4 (mod 5671), and Alice has to compute a. To do this, she needs to compute φ(5671), and to do this, she needs to factor She computes 5671 = 75., so she knows a prime less than 5671 should divide She tries each of the primes 2, 3, 5, 7, 11, 13, 17, 19, 23, 29, 31, 37, 41, 43, and 47 and finds that none of them divide She then tries 53 and sees that 5671 = From this, she knows that φ(5671) = = Her next job is to write 1 as a combination of 17 and 5512, which she does using the Euclidean algorithm. She finds: 5512 = = , so 1 = = 17 4 ( ) = and (mod 5512), so (mod 5671) using the general rule on page 3 of Unit 15 or Euler s theorem, and

5 (mod 5671), using her modular arithmetic calculator. She concludes that the secret number is: a=4534. To check this, she compute (mod 5671), so she s got the secret message. This time, Eve had to work quite a bit harder to find the factorization of 5671, so now Eve is a bit more impressed with Bob. REMARK: We can also see how Bob s job is different from Eve s job. The difference is that Bob knows that 5671 = when the problem begins, because Bob has picked the primes p = 53 and q = 107. The extra problem that Eve must solve that Bob does not need to solve is to factor As you can see in this last problem, that is not such a big deal, because you can test whether a prime less than 75 divides 5671 in a few minutes. However, if we were to pick n = , it would take you quite a long time to discover that p = 5323 and q = In fact, you would have to check more than 500 primes to find this factorization. This would take a person more than an hour, but a computer program could do it in a few seconds. The real security of the RSA algorithm depends on using much bigger primes, and these are chosen and manipulated by computer. In principle, it takes longer than the age of the universe to factor a number that is a product of two primes with 200 digits each Sending and receiving actual messages using RSA. To send a message using RSA, we can assign a number to each letter or number. For example, we can do this using the following table: A B C D E F G H I J K L M N O P Q R S T U V W X Y Z (space) For example, the letter A is translated to 2. The letter R is translated to 19, and the number 3 is translated to 31. This is a relatively simple substitution encryption technique, and it can easily be broken using frequency analysis. Its only function is to translate letters into numbers. We can get a secure code by using RSA to encode each of the numbers from 2 to 38. If we also wanted our text to include punctuation marks, we could assign numbers to them, but let s avoid this so that things are simpler. EXAMPLE: Use RSA with p = 43, q = 47 and k = 11 to encode the message The exam is at 145. To do this, first rewrite the message so there are no spaces to get Theexamisat145. Next, change each letter to a number according to the table above. So since T is translated as 21, the first number is 21. Since H is translated as 9 and h is

6 6 the second letter in the message, the second number is 9. We put dashes between numbers, and translate the entire message as: Now we can encode each of these numbers using RSA. Since p = 43 and q = 47, N = p q = = To encode the first number 21, we just do Alice s job with k=11 and N=2021 and compute (mod 2021) The second number is encoded as (mod 2021), and so on. The message encoded via RSA is: This is the message that the sender would send to the receiver. To decode this message, the receiver would compute 11 b (mod 2021) for each number in the message, and then translate the message back into letters and numbers by reversing the table. For example, to decode the first number 379, the receiver should compute (mod 2021). Since 2021 = 43 47, φ(2021) = = First write 1 as a combination of 1932 and 11 as follows: 1932 = = = = 3 + 1, which gives 1 = 4 3 = 4 (7 4) = = 2 (11 7) 7 = , so 1 = ( ) = , so (mod 1932), and (mod 2021), and Then we translate 21 as t by reversing the table at the beginning of this section. It is now easy to decode the rest of the message, and requires little extra work. For example, to decode the second number 298 in the encoded message, we compute (mod 2021), which translates back to h. By following this process, we ultimately get the original message theexamisat145. EXAMPLE: Suppose the receiver has chosen p = 43, q = 47, and k = 31, and has received the encoded message What is the original message? We already computed N = 2021 and φ(n) = 1932 in the last example. To decode the message, compute 31 b (mod 2021) for each number b in the sequence. We start with b = The first step is to write 1 as a combination of 31 and 1932, which gives: 1 = (mod 1932), so (mod 2021), so (mod 2021). Since 10 translates as i, the first letter is i.

7 31 Similarly, (mod 2021), and 13 translates as l, so the second letter is l. Continuing in this way, you see that the message is ilikecats, which you can read as I like cats. I ll hand out an RSA project, where you ll get a chance to try to decode a message which gives the answer to the first question on the final exam. In most math classes, the problems on the final exam are a closely guarded secret, but I figure that in a class about the RSA algorithm and coding, it would be a good idea to give you an incentive to decode an actual message. In the project, I ll pick bigger primes, so it will not be so easy for you to decode the message. For this, it will be very useful for you to have a list of many primes, which you can find at the website: Some comments: In this section, I ll make some comments about the RSA algorithm. You don t need to know anything from this section for the course. (1) Even though you weren t aware of the RSA algorithm before you took this course, you ve probably used it. Almost any web browser has some version of the RSA algorithm programmed into it. The computer does the calculations for you, so you don t need to know how to compute kth roots in modular arithmetic. Even now, you re not going to start performing the RSA algorithm yourself when you re sending a secure message, because your computer does it much better than you could do it. (2) Although we have learned some abstract mathematics and seen how it can be applied to a real world problem, I don t expect you to start using the RSA algorithm in practice. Instead, the purpose of this course is more to give you some idea of how mathematical ideas which look completely abstract and unrelated to real life can be used to solve practical problems. Hopefully, this will give you some appreciation of the power and reach of mathematics. Further, hopefully it will give you the idea that even if you don t necessarily want to do math, some very interesting and sophisticated mathematical ideas are in reality quite simple. After all, we ve learned how the RSA algorithm works in a one semester course, and we only needed high school algebra to do this. Many very important mathematical ideas have fairly simple conceptual explanations. (3) You might wonder how the primes p and q are chosen and how k is chosen. In practice, p and q have to be bigger than any number a that will be sent in the message, and this will ensure that a is relatively prime to N = p q. Since all characters can be expressed with fewer than 100 numbers, any primes bigger than 100 will do. To choose k, we just have to pick a number that is relatively prime to p 1 and q 1. I usually pick k to be prime, since then it is easy to see whether k divides p or q. For example, if p = 67 and q = 103, then p 1 = 66 and q 1 = 102. The primes dividing either of these numbers are 2, 3, 11 and 17, so if I pick k = 13, that ll work. If p and q are 100 digits long, it may not be so easy to factor p 1 and q 1, but we can just pick a prime k that is 20 digits long, and see if k divides p 1 or q 1. If it does, then we just try another prime in place of k and after a short time, we ll find one that does not divide p 1 or q 1. 7

8 8 (4) When you do a single decoding problem, like when you re playing the role of Bob or Eve, it looks like as much of the work is involved in writing 1 as a combination of k and φ(n) as in factoring N. This is misleading. Although the process of writing 1 as a combination of two numbers is somewhat difficult to learn, once you ve learned how to do it, it is routine, and it is very easy to write a computer program telling the computer to do it. Further, even if the numbers involved are very big, a computer can do it really quickly, and the computer is not going to make mistakes using the distributive law. On the other hand, there are no really good tricks known for factoring a number N as a product of two primes. The way to do this is to go through a list of primes until you find one that divides N. If N has 300 digits, then there are something on the order of primes to check. Even for a computer, that is going to take a very, very long time to check. (5) It is interesting to note that although RSA depends on the fact that there is no known procedure for quickly factoring a number as a product of two primes, it is entirely possible that someone will think of one. If someone thought of one, they might very well not tell anyone. They could then intercept many secret messages, and for example, transfer all the money in your bank account to a numbered account in the Cayman islands. A more realistic scenario involves the NSA, or National Security Agency, which is a government agency. The NSA employs many mathematicians and computer scientists who work on coding and decoding problems. If the NSA were to find a way to break the RSA algorithm, they probably wouldn t tell anyone. Instead, they would use their method to intercept all kinds of secret messages sent by other governments and other groups. (6) In fact, there is in theory a kind of computer called a quantum computer, and a fully operational quantum computer can factor any number quickly, and hence could break RSA. Some primitive quantum computers have been built, but they can only multiply small numbers together at this point. It is not clear whether it is feasible to build a quantum computer. On the other hand, an operational quantum computer could also use principles of quantum mechanics to produce an unbreakable code. (7) An algorithm like RSA does not need to be perfect to be effective. There are old-fashioned espionage techniques, and you read about them in the CodeBook. If a country, like Poland before World War 2, wants to know some secret information, they can always try to capture or otherwise find someone on the other side, and try to induce them to give up the information. They can also try infiltrating a mole into the other side. As long as these methods are much easier than breaking RSA, RSA will have value. EXERCISES: (1) Suppose Alice wants to send to Bob the secret number a=5 and Bob has sent Alice k=13 and N=201. What is the encoded message that Alice should send Bob? (2) Suppose Alice wants to send to Bob the secret number a=2 and Bob has sent Alice k=17 and N=403. What is the encoded message that Alice sends Bob?

9 (3) Suppose that Alice has sent Bob the encoded message b=10 and Bob has chosen p = 7 and q = 11. If k = 43, what is Alice s original message? (4) Suppose that Alice has sent Bob the encoded message b=2 and Bob has chosen p = 7, q = 19 and k = 5. What is Alice s secret message? (5) Suppose that Eve sees that Bob has told Alice to use k=13 and N=85, and Alice has sent Bob the encoded message b=4. What is the secret message? (6) Suppose that Eve sees that Bob has told Alice to use k=13 and N=1121, and Alice has sent Bob the encoded message b=7. What is the secret message? (7) Suppose that Eve sees that Bob has told Alice to use k=17 and N=123241, and Alice has sent Bob the encoded message b= If Eve knows that Alice is sending Bob the time when they will rob a bank, when should she alert the bank to expect the robbers? 9

### MATH 13150: Freshman Seminar Unit 10

MATH 13150: Freshman Seminar Unit 10 1. Relatively prime numbers and Euler s function In this chapter, we are going to discuss when two numbers are relatively prime, and learn how to count the numbers

### PRIME NUMBERS & SECRET MESSAGES

PRIME NUMBERS & SECRET MESSAGES I. RSA CODEBREAKER GAME This is a game with two players or teams. The players take turns selecting either prime or composite numbers as outlined on the board below. The

### 1) A very simple example of RSA encryption

Solved Examples 1) A very simple example of RSA encryption This is an extremely simple example using numbers you can work out on a pocket calculator (those of you over the age of 35 45 can probably even

### Notes for Recitation 5

6.042/18.062J Mathematics for Computer Science September 24, 2010 Tom Leighton and Marten van Dijk Notes for Recitation 5 1 Exponentiation and Modular Arithmetic Recall that RSA encryption and decryption

### RSA Encryption. Tom Davis tomrdavis@earthlink.net http://www.geometer.org/mathcircles October 10, 2003

RSA Encryption Tom Davis tomrdavis@earthlink.net http://www.geometer.org/mathcircles October 10, 2003 1 Public Key Cryptography One of the biggest problems in cryptography is the distribution of keys.

### RSA Encryption. Grade Levels. Objectives and Topics. Introduction and Outline (54)(2)(2) (27)(2)(2)(2) (9)(3)(2)(2)(2) (3)(3)(3)(2)(2)(2)

RSA Encryption Grade Levels This activity is intended for high schools students, grades 10 12. Objectives and Topics One of the classical examples of applied mathematics is encryption. Through this activity,

### MATH 13150: Freshman Seminar Unit 14

MATH 13150: Freshman Seminar Unit 14 1. Powers in mod p arithmetic In this Unit, we will study powers a n (mod p). It will turn out that these are much easier to compute then one would imagine. Let s recall

### Outline. Cryptography. Bret Benesh. Math 331

Outline 1 College of St. Benedict/St. John s University Department of Mathematics Math 331 2 3 The internet is a lawless place, and people have access to all sorts of information. What is keeping people

### 5544 = 2 2772 = 2 2 1386 = 2 2 2 693. Now we have to find a divisor of 693. We can try 3, and 693 = 3 231,and we keep dividing by 3 to get: 1

MATH 13150: Freshman Seminar Unit 8 1. Prime numbers 1.1. Primes. A number bigger than 1 is called prime if its only divisors are 1 and itself. For example, 3 is prime because the only numbers dividing

### 9 Modular Exponentiation and Cryptography

9 Modular Exponentiation and Cryptography 9.1 Modular Exponentiation Modular arithmetic is used in cryptography. In particular, modular exponentiation is the cornerstone of what is called the RSA system.

### The application of prime numbers to RSA encryption

The application of prime numbers to RSA encryption Prime number definition: Let us begin with the definition of a prime number p The number p, which is a member of the set of natural numbers N, is considered

### Cryptography. Helmer Aslaksen Department of Mathematics National University of Singapore

Cryptography Helmer Aslaksen Department of Mathematics National University of Singapore aslaksen@math.nus.edu.sg www.math.nus.edu.sg/aslaksen/sfm/ 1 Basic Concepts There are many situations in life where

### Related Idea: RSA Encryption Step 1

Related Idea: RSA Encryption Step 1 Example (RSA Encryption: Step 1) Here is how Alice and Bob can do to share a secret from Carl: What Alice Does 1. Alice chooses two (large) prime numbers p and q, which

### Mathematics of Internet Security. Keeping Eve The Eavesdropper Away From Your Credit Card Information

The : Keeping Eve The Eavesdropper Away From Your Credit Card Information Department of Mathematics North Dakota State University 16 September 2010 Science Cafe Introduction Disclaimer: is not an internet

### Cryptography and Network Security Department of Computer Science and Engineering Indian Institute of Technology Kharagpur

Cryptography and Network Security Department of Computer Science and Engineering Indian Institute of Technology Kharagpur Module No. # 01 Lecture No. # 05 Classic Cryptosystems (Refer Slide Time: 00:42)

### Announcements. CS243: Discrete Structures. More on Cryptography and Mathematical Induction. Agenda for Today. Cryptography

Announcements CS43: Discrete Structures More on Cryptography and Mathematical Induction Işıl Dillig Class canceled next Thursday I am out of town Homework 4 due Oct instead of next Thursday (Oct 18) Işıl

### Public Key Cryptography: RSA and Lots of Number Theory

Public Key Cryptography: RSA and Lots of Number Theory Public vs. Private-Key Cryptography We have just discussed traditional symmetric cryptography: Uses a single key shared between sender and receiver

### The science of encryption: prime numbers and mod n arithmetic

The science of encryption: prime numbers and mod n arithmetic Go check your e-mail. You ll notice that the webpage address starts with https://. The s at the end stands for secure meaning that a process

### Number Theory. Proof. Suppose otherwise. Then there would be a finite number n of primes, which we may

Number Theory Divisibility and Primes Definition. If a and b are integers and there is some integer c such that a = b c, then we say that b divides a or is a factor or divisor of a and write b a. Definition

### Duke University TIP Summer Studies Program 2014

Duke University TIP Summer Studies Program 2014 Cryptography, Codebreaking, and the Mathematics of Spying Rice University, Term II Instructor: Kenan Ince TA: Taylor Pospisil Required Texts: (provided by

### UNIVERSITY OF MASSACHUSETTS Dept. of Electrical & Computer Engineering. Introduction to Cryptography ECE 597XX/697XX

UNIVERSITY OF MASSACHUSETTS Dept. of Electrical & Computer Engineering Introduction to Cryptography ECE 597XX/697XX Part 6 Introduction to Public-Key Cryptography Israel Koren ECE597/697 Koren Part.6.1

### Introduction to Diophantine Equations

Introduction to Diophantine Equations Tom Davis tomrdavis@earthlink.net http://www.geometer.org/mathcircles September, 2006 Abstract In this article we will only touch on a few tiny parts of the field

### Public-Key Cryptography. Oregon State University

Public-Key Cryptography Çetin Kaya Koç Oregon State University 1 Sender M Receiver Adversary Objective: Secure communication over an insecure channel 2 Solution: Secret-key cryptography Exchange the key

### Basic Algorithms In Computer Algebra

Basic Algorithms In Computer Algebra Kaiserslautern SS 2011 Prof. Dr. Wolfram Decker 2. Mai 2011 References Cohen, H.: A Course in Computational Algebraic Number Theory. Springer, 1993. Cox, D.; Little,

### PUBLIC KEY ENCRYPTION

PUBLIC KEY ENCRYPTION http://www.tutorialspoint.com/cryptography/public_key_encryption.htm Copyright tutorialspoint.com Public Key Cryptography Unlike symmetric key cryptography, we do not find historical

### CRYPTOGRAPHIC ALGORITHMS (AES, RSA)

CALIFORNIA STATE POLYTECHNIC UNIVERSITY, POMONA CRYPTOGRAPHIC ALGORITHMS (AES, RSA) A PAPER SUBMITTED TO PROFESSOR GILBERT S. YOUNG IN PARTIAL FULFILLMENT OF THE REQUIREMENT FOR THE COURSE CS530 : ADVANCED

### The RSA Algorithm: A Mathematical History of the Ubiquitous Cryptological Algorithm

The RSA Algorithm: A Mathematical History of the Ubiquitous Cryptological Algorithm Maria D. Kelly December 7, 2009 Abstract The RSA algorithm, developed in 1977 by Rivest, Shamir, and Adlemen, is an algorithm

### Today ENCRYPTION. Cryptography example. Basic principles of cryptography

Today ENCRYPTION The last class described a number of problems in ensuring your security and privacy when using a computer on-line. This lecture discusses one of the main technological solutions. The use

### MATH 537 (Number Theory) FALL 2016 TENTATIVE SYLLABUS

MATH 537 (Number Theory) FALL 2016 TENTATIVE SYLLABUS Class Meetings: MW 2:00-3:15 pm in Physics 144, September 7 to December 14 [Thanksgiving break November 23 27; final exam December 21] Instructor:

### An Introduction to the RSA Encryption Method

April 17, 2012 Outline 1 History 2 3 4 5 History RSA stands for Rivest, Shamir, and Adelman, the last names of the designers It was first published in 1978 as one of the first public-key crytographic systems

### The Mathematics of RSA

The Mathematics of RSA Dimitri Papaioannou May 24, 2007 1 Introduction Cryptographic systems come in two flavors. Symmetric or Private key encryption and Asymmetric or Public key encryption. Strictly speaking,

### NUMBER THEORY AND CRYPTOGRAPHY

NUMBER THEORY AND CRYPTOGRAPHY KEITH CONRAD 1. Introduction Cryptography is the study of secret messages. For most of human history, cryptography was important primarily for military or diplomatic purposes

### MA2C03 Mathematics School of Mathematics, Trinity College Hilary Term 2016 Lecture 59 (April 1, 2016) David R. Wilkins

MA2C03 Mathematics School of Mathematics, Trinity College Hilary Term 2016 Lecture 59 (April 1, 2016) David R. Wilkins The RSA encryption scheme works as follows. In order to establish the necessary public

Hill Cipher Project K80TTQ1EP-??,VO.L,XU0H5BY,_71ZVPKOE678_X,N2Y-8HI4VS,,6Z28DDW5N7ADY013 Directions: Answer all numbered questions completely. Show non-trivial work in the space provided. Non-computational

### 100 Mathematics Teacher Vol. 104, No. 2 September 2010

Chocolate 100 Mathematics Teacher Vol. 104, No. 2 September 2010 Copyright 2010 The National Council of Teachers of Mathematics, Inc. www.nctm.org. All rights reserved. This material may not be copied

### Discrete Mathematics, Chapter 4: Number Theory and Cryptography

Discrete Mathematics, Chapter 4: Number Theory and Cryptography Richard Mayr University of Edinburgh, UK Richard Mayr (University of Edinburgh, UK) Discrete Mathematics. Chapter 4 1 / 35 Outline 1 Divisibility

### Introduction to Encryption

Computers and Society Introduction to Encryption Chris Brooks Department of Computer Science University of San Francisco Department of Computer Science University of San Francisco p.1/35 3-0: Terminology

### = 1, or how to convince your parents that your math prof is crazy. We want to introduce a new number system where the only numbers are

MATH 13150: Freshman Seminar Unit 11 1. Modular arithmetic In this chapter, we discuss a new number system, where the only numbers are 0,1,2,3 and 4. The idea is to add and multiply them the way we would

### Course notes on Number Theory

Course notes on Number Theory In Number Theory, we make the decision to work entirely with whole numbers. There are many reasons for this besides just mathematical interest, not the least of which is that

### An Interesting Way to Combine Numbers

An Interesting Way to Combine Numbers Joshua Zucker and Tom Davis November 28, 2007 Abstract This exercise can be used for middle school students and older. The original problem seems almost impossibly

### Students in their first advanced mathematics classes are often surprised

CHAPTER 8 Proofs Involving Sets Students in their first advanced mathematics classes are often surprised by the extensive role that sets play and by the fact that most of the proofs they encounter are

### UOSEC Week 2: Asymmetric Cryptography. Frank IRC kee Adam IRC xe0 IRC: irc.freenode.net #0x4f

UOSEC Week 2: Asymmetric Cryptography Frank farana@uoregon.edu IRC kee Adam pond2@uoregon.edu IRC xe0 IRC: irc.freenode.net #0x4f Agenda HackIM CTF Results GITSC CTF this Saturday 10:00am Basics of Asymmetric

### RSA Question 2. Bob thinks that p and q are primes but p isn t. Then, Bob thinks Φ Bob :=(p-1)(q-1) = φ(n). Is this true?

RSA Question 2 Bob thinks that p and q are primes but p isn t. Then, Bob thinks Φ Bob :=(p-1)(q-1) = φ(n). Is this true? Bob chooses a random e (1 < e < Φ Bob ) such that gcd(e,φ Bob )=1. Then, d = e -1

### Fractions and Decimals

Fractions and Decimals Tom Davis tomrdavis@earthlink.net http://www.geometer.org/mathcircles December 1, 2005 1 Introduction If you divide 1 by 81, you will find that 1/81 =.012345679012345679... The first

### CS Computer and Network Security: Applied Cryptography

CS 5410 - Computer and Network Security: Applied Cryptography Professor Patrick Traynor Spring 2016 Reminders Project Ideas are due on Tuesday. Where are we with these? Assignment #2 is posted. Let s get

### >> double (s) ans = Columns 1 through Columns 13 through

3. Encryption A cryptosystem is a way of encoding and decoding messages so that only certain people are able to read them. This case presents a cryptosystem based on matrix algebra and implemented using

### Principles of Public Key Cryptography. Applications of Public Key Cryptography. Security in Public Key Algorithms

Principles of Public Key Cryptography Chapter : Security Techniques Background Secret Key Cryptography Public Key Cryptography Hash Functions Authentication Chapter : Security on Network and Transport

### Practice Problems for First Test

Mathematicians have tried in vain to this day to discover some order in the sequence of prime numbers, and we have reason to believe that it is a mystery into which the human mind will never penetrate.-

### Homework 5 Solutions

Homework 5 Solutions 4.2: 2: a. 321 = 256 + 64 + 1 = (01000001) 2 b. 1023 = 512 + 256 + 128 + 64 + 32 + 16 + 8 + 4 + 2 + 1 = (1111111111) 2. Note that this is 1 less than the next power of 2, 1024, which

### Introduction to Symmetric and Asymmetric Cryptography

Introduction to Symmetric and Asymmetric Cryptography Ali E. Abdallah Birmingham CityUniversity Email: Ali.Abdallah@bcu.ac.uk Lectures are part of the project: ConSoLiDatE Multi-disciplinary Cooperation

### Mathematics of Cryptography

Number Theory Modular Arithmetic: Two numbers equivalent mod n if their difference is multiple of n example: 7 and 10 are equivalent mod 3 but not mod 4 7 mod 3 10 mod 3 = 1; 7 mod 4 = 3, 10 mod 4 = 2.

### Modulo a Prime Number

Modulo a Prime Number We have seen that modular arithmetic can both be easier than normal arithmetic (in how powers behave), and more difficult (in that we can t always divide). But when n is a prime number,

### Induction. Margaret M. Fleck. 10 October These notes cover mathematical induction and recursive definition

Induction Margaret M. Fleck 10 October 011 These notes cover mathematical induction and recursive definition 1 Introduction to induction At the start of the term, we saw the following formula for computing

### Shared Secret = Trust

Trust The fabric of life! Holds civilizations together Develops by a natural process Advancement of technology results in faster evolution of societies Weakening the natural bonds of trust From time to

### Elementary Number Theory We begin with a bit of elementary number theory, which is concerned

CONSTRUCTION OF THE FINITE FIELDS Z p S. R. DOTY Elementary Number Theory We begin with a bit of elementary number theory, which is concerned solely with questions about the set of integers Z = {0, ±1,

### Software Tool for Implementing RSA Algorithm

Software Tool for Implementing RSA Algorithm Adriana Borodzhieva, Plamen Manoilov Rousse University Angel Kanchev, Rousse, Bulgaria Abstract: RSA is one of the most-common used algorithms for public-key

MODULAR ARITHMETIC KEITH CONRAD. Introduction We will define the notion of congruent integers (with respect to a modulus) and develop some basic ideas of modular arithmetic. Applications of modular arithmetic

### Vieta s Formulas and the Identity Theorem

Vieta s Formulas and the Identity Theorem This worksheet will work through the material from our class on 3/21/2013 with some examples that should help you with the homework The topic of our discussion

### Is this number prime? Berkeley Math Circle Kiran Kedlaya

Is this number prime? Berkeley Math Circle 2002 2003 Kiran Kedlaya Given a positive integer, how do you check whether it is prime (has itself and 1 as its only two positive divisors) or composite (not

### The Mathematics of the RSA Public-Key Cryptosystem

The Mathematics of the RSA Public-Key Cryptosystem Burt Kaliski RSA Laboratories ABOUT THE AUTHOR: Dr Burt Kaliski is a computer scientist whose involvement with the security industry has been through

### CLASS 3, GIVEN ON 9/27/2010, FOR MATH 25, FALL 2010

CLASS 3, GIVEN ON 9/27/2010, FOR MATH 25, FALL 2010 1. Greatest common divisor Suppose a, b are two integers. If another integer d satisfies d a, d b, we call d a common divisor of a, b. Notice that as

### Steps to Proving a Theorem

Steps to Proving a Theorem Step 1: Understand Goal What am I looking for? What should the last sentence in my proof say? What are some equivalent ways to state what I want? Are there any complicated definitions

### ORDERS OF ELEMENTS IN A GROUP

ORDERS OF ELEMENTS IN A GROUP KEITH CONRAD 1. Introduction Let G be a group and g G. We say g has finite order if g n = e for some positive integer n. For example, 1 and i have finite order in C, since

### Homework 7. Using the monoalphabetic cipher in Figure 8.3, encode the message This is an easy problem. Decode the message rmij u uamu xyj.

Problems: 1 to 11. Homework 7 Question: 1 Using the monoalphabetic cipher in Figure 8.3, encode the message This is an easy problem. Decode the message rmij u uamu xyj. This is an easy problem. > uasi

### U.C. Berkeley CS276: Cryptography Handout 0.1 Luca Trevisan January, 2009. Notes on Algebra

U.C. Berkeley CS276: Cryptography Handout 0.1 Luca Trevisan January, 2009 Notes on Algebra These notes contain as little theory as possible, and most results are stated without proof. Any introductory

### Answer: (a) Since we cannot repeat men on the committee, and the order we select them in does not matter, ( )

1. (Chapter 1 supplementary, problem 7): There are 12 men at a dance. (a) In how many ways can eight of them be selected to form a cleanup crew? (b) How many ways are there to pair off eight women at the

### BRIEF INTRODUCTION TO CRYPTOGRAPHY. By PAGVAC. February 8, 2004

BRIEF INTRODUCTION TO CRYPTOGRAPHY By PAGVAC February 8, 2004 What will I learn from this file? What cryptography is How encryption and decryption works Cryptography terms Symmetric cryptography Asymmetric

### Primes in Sequences. Lee 1. By: Jae Young Lee. Project for MA 341 (Number Theory) Boston University Summer Term I 2009 Instructor: Kalin Kostadinov

Lee 1 Primes in Sequences By: Jae Young Lee Project for MA 341 (Number Theory) Boston University Summer Term I 2009 Instructor: Kalin Kostadinov Lee 2 Jae Young Lee MA341 Number Theory PRIMES IN SEQUENCES

### CONNECT: Powers and logs POWERS, INDICES, EXPONENTS, LOGARITHMS THEY ARE ALL THE SAME!

CONNECT: Powers and logs POWERS, INDICES, EXPONENTS, LOGARITHMS THEY ARE ALL THE SAME! You may have come across the terms powers, indices, exponents and logarithms. But what do they mean? The terms power(s),

### FAREY FRACTION BASED VECTOR PROCESSING FOR SECURE DATA TRANSMISSION

FAREY FRACTION BASED VECTOR PROCESSING FOR SECURE DATA TRANSMISSION INTRODUCTION GANESH ESWAR KUMAR. P Dr. M.G.R University, Maduravoyal, Chennai. Email: geswarkumar@gmail.com Every day, millions of people

### Orders Modulo A Prime

Orders Modulo A Prime Evan Chen March 6, 2015 In this article I develop the notion of the order of an element modulo n, and use it to prove the famous n 2 + 1 lemma as well as a generalization to arbitrary

### Lecture 6 - Cryptography

Lecture 6 - Cryptography CSE497b - Spring 2007 Introduction Computer and Network Security Professor Jaeger www.cse.psu.edu/~tjaeger/cse497b-s07 Question 2 Setup: Assume you and I don t know anything about

### 3.4 Complex Zeros and the Fundamental Theorem of Algebra

86 Polynomial Functions.4 Complex Zeros and the Fundamental Theorem of Algebra In Section., we were focused on finding the real zeros of a polynomial function. In this section, we expand our horizons and

### Pretty Good Privacy (PGP)

Pretty Good Privacy (PGP) Contents...1 Abstract...2 Introduction...3 The importance of the cryptography...4 The idea about how (PGP) works...5 Legal issues surrounding (PGP)...6 The implementation and

### Cryptography and Number Theory

Chapter 2 Cryptography and Number Theory 2.1 Cryptography and Modular Arithmetic Introduction to Cryptography For thousands of years people have searched for ways to send messages secretly. There is a

### RSA Cryptosystem. Yufei Tao. Department of Computer Science and Engineering Chinese University of Hong Kong. RSA Cryptosystem

Yufei Tao Department of Computer Science and Engineering Chinese University of Hong Kong In this lecture, we will discuss the RSA cryptosystem, which is widely adopted as a way to encrypt a message, or

### Digital Signatures. Kara Breeden and Aviva Kosansky

Digital Signatures Kara Breeden and Aviva Kosansky What is a Digital Signature Digital = consisting of a string of digits PARADOXICAL! Strings of digits can be copied but signatures are not meant to be

### Network Security. Computer Networking Lecture 08. March 19, 2012. HKU SPACE Community College. HKU SPACE CC CN Lecture 08 1/23

Network Security Computer Networking Lecture 08 HKU SPACE Community College March 19, 2012 HKU SPACE CC CN Lecture 08 1/23 Outline Introduction Cryptography Algorithms Secret Key Algorithm Message Digest

### Congruences. Robert Friedman

Congruences Robert Friedman Definition of congruence mod n Congruences are a very handy way to work with the information of divisibility and remainders, and their use permeates number theory. Definition

### Outline. Computer Science 418. Digital Signatures: Observations. Digital Signatures: Definition. Definition 1 (Digital signature) Digital Signatures

Outline Computer Science 418 Digital Signatures Mike Jacobson Department of Computer Science University of Calgary Week 12 1 Digital Signatures 2 Signatures via Public Key Cryptosystems 3 Provable 4 Mike

### Topic 1: Cryptography

1 Introduction to Cryptography: 1.1 Science SCIE1000 Project, Semester 1 2011 Topic 1: Cryptography Cryptography is the science of using mathematics to hide information. Cryptography allows us to store

### (Refer Slide Time: 2:03)

Control Engineering Prof. Madan Gopal Department of Electrical Engineering Indian Institute of Technology, Delhi Lecture - 11 Models of Industrial Control Devices and Systems (Contd.) Last time we were

### CS 161 Computer Security

Song Spring 2015 CS 161 Computer Security Discussion 11 April 7 & April 8, 2015 Question 1 RSA (10 min) (a) Describe how to find a pair of public key and private key for RSA encryption system. Find two

### 3. Mathematical Induction

3. MATHEMATICAL INDUCTION 83 3. Mathematical Induction 3.1. First Principle of Mathematical Induction. Let P (n) be a predicate with domain of discourse (over) the natural numbers N = {0, 1,,...}. If (1)

### Finding Rates and the Geometric Mean

Finding Rates and the Geometric Mean So far, most of the situations we ve covered have assumed a known interest rate. If you save a certain amount of money and it earns a fixed interest rate for a period

### Square roots by subtraction

Square roots by subtraction Frazer Jarvis When I was at school, my mathematics teacher showed me the following very strange method to work out square roots, using only subtraction, which is apparently

### The Laws of Cryptography Cryptographers Favorite Algorithms

2 The Laws of Cryptography Cryptographers Favorite Algorithms 2.1 The Extended Euclidean Algorithm. The previous section introduced the field known as the integers mod p, denoted or. Most of the field

### Chapter 11 Number Theory

Chapter 11 Number Theory Number theory is one of the oldest branches of mathematics. For many years people who studied number theory delighted in its pure nature because there were few practical applications

### GMAT Math: Exponents and Roots (Excerpt)

GMAT Math: Exponents and Roots (Excerpt) Jeff Sackmann / GMAT HACKS January 201 Contents 1 Introduction 2 2 Difficulty Levels Problem Solving 4 4 Data Sufficiency 5 5 Answer Key 6 6 Explanations 7 1 1

### Mathematics of Cryptography

CHAPTER 2 Mathematics of Cryptography Part I: Modular Arithmetic, Congruence, and Matrices Objectives This chapter is intended to prepare the reader for the next few chapters in cryptography. The chapter

### Hill s Cipher: Linear Algebra in Cryptography

Ryan Doyle Hill s Cipher: Linear Algebra in Cryptography Introduction: Since the beginning of written language, humans have wanted to share information secretly. The information could be orders from a

### WRITING PROOFS. Christopher Heil Georgia Institute of Technology

WRITING PROOFS Christopher Heil Georgia Institute of Technology A theorem is just a statement of fact A proof of the theorem is a logical explanation of why the theorem is true Many theorems have this

### 159.334 Computer Networks. Network Security 1. Professor Richard Harris School of Engineering and Advanced Technology

Network Security 1 Professor Richard Harris School of Engineering and Advanced Technology Presentation Outline Overview of Identification and Authentication The importance of identification and Authentication

### Network Security. HIT Shimrit Tzur-David

Network Security HIT Shimrit Tzur-David 1 Goals: 2 Network Security Understand principles of network security: cryptography and its many uses beyond confidentiality authentication message integrity key

### Chapter 10 Asymmetric-Key Cryptography

Chapter 10 Asymmetric-Key Cryptography Copyright The McGraw-Hill Companies, Inc. Permission required for reproduction or display. 10.1 Chapter 10 Objectives To distinguish between two cryptosystems: symmetric-key

### Some practice problems for midterm 2

Some practice problems for midterm 2 Kiumars Kaveh November 15, 2011 Problem: What is the remainder of 6 2000 when divided by 11? Solution: This is a long-winded way of asking for the value of 6 2000 mod

### CHAPTER 5. Number Theory. 1. Integers and Division. Discussion

CHAPTER 5 Number Theory 1. Integers and Division 1.1. Divisibility. Definition 1.1.1. Given two integers a and b we say a divides b if there is an integer c such that b = ac. If a divides b, we write a

### Proof of Euler s φ (Phi) Function Formula

Rose- Hulman Undergraduate Mathematics Journal Proof of Euler s φ (Phi Function Formula Shashank Chorge a Juan Vargas b Volume 14, no. 2, Fall 2013 Sponsored by Rose-Hulman Institute of Technology Department