ABSTRACT
In this chapter, we consider a variant of RSA that can have private exponents smaller than N1/4 and yet resists all known small private exponent attacks such as Wiener’s continued fraction attack and other lattice-based attacks. The variant, unlike multi-prime RSA and Takagi’s scheme which also accomplish this by having more primes in the modulus, is a special case of RSA in which the RSA primes are constructed with addition structure.
