ABSTRACT
In this chapter, we collect some of the earlier known attacks on RSA. Several of these early attacks are examples of protocol failures. A protocol failure occurs when a secure instance of a cryptosystem is not used properly, resulting in the failure of the desired security goals of the protocol. All of the protocol failures here allow an adversary to compute the plaintext given several ciphertexts without having to break an instance of RSA.
