RSA ALGORITHM BY Darshana Chaturvedi OUTLINE INTRODUCTION RSA

RSA ALGORITHM BY : Darshana Chaturvedi

OUTLINE Ø Ø Ø Ø INTRODUCTION RSA ALGORITHM EXAMPLES RSA IS EFFECTIVE FERMAT’S LITTLE THEOREM EUCLID’S ALGORITHM REFERENCES

INTRODUCTION q § § § Cryptography Ancient art. Science of writing in secret code. Art of protecting information by encrypting it into an unreadable format, called cipher text which can be decrypted into the plain text using a secret key. Uses Email – messages Credit card information Corporate data

CONT. . q § § q Types Symmetric-key systems(uses a single key) Public-key systems introduced in 1970’s(uses a public key known to everyone and a private key that only the receiver of the messages uses) Previously both senders and receivers implemented the algorithms by hand but with the advent of computers, things changed.

CONT. . q § § Simplest cryptographic systems Algorithms for both encryption and decryption are fixed and known to everyone. There are two inputs, the text to be encoded or decoded and a key.

CONT. . q § § Symmetric key encryption No message can be sent unless there has been some prior agreement on a key. Even if there is an agreement, if the same key is used over an extended period of time, an eavesdropper may be able to infer the key and break the code.

RSA ALGORITHM § § q § New keys must be transmitted between the senders and receivers to avoid code breaking. The most widely used public key system is the RSA algorithm [Rivest , Shamir and Adleman] in 1978 We assume that Bob and Alice wish to exchange secure messages and that Eve is attempting to eavesdrop.

CONT. . q Assume that Alice wants to send a message to Bob. Then § Bob chooses a private key known only to him. Bob exploits a function f to compute his public key, public = f(private). § Bob publishes public key. § Alice exploits Bob’s public key to compute ciphertext= encrypt(plaintext, public) and she sends ciphertext to Bob.

CONT. . § Bob exploits his private key to compute plaintext= decrypt(ciphertext, private). In order for this last step to work, encrypt and decrypt must be designed so that one is the inverse of the other.

CONT. .

CONT. . § § If there exist efficient algorithm for performing all four of the steps, then Bob and Alice will be able to exchange messages. We assume that Eve knows the algorithm encrypt and decrypt. So she could easily eavesdrop if she could infer Bob’s private key from his public one or if she could compute decrypt without knowing Bob’s private key.

CONT. . q RSA algorithm uses the mathematical properties of modular arithmetic and the computational properties of prime numbers to ensure that Bob and Alice can perform their tasks efficiently but Eve cannot.

STEPS Alice uses the RSA algorithm to send a message to Bob as follows. q Bob constructs his public and private keys § § § Bob chooses two large prime numbers p and q. From them, he computes n=p*q. Bob, finds a value e such that 1 < e < p. q and gcd(e, (p-1)(q-1))=1. (in other words, he finds an e such that e and (p-1). (q-1) are relatively prime). Bob computes a value d such that d. e(mod(p-1). (q 1))= 1. In RSA terminology, this value d, rather than the original numbers p and q, is referred to as Bob’s private key.

CONT. . q q q Bob publishes (n, e) as his public key. Alice breaks her message plaintext into segments such that no segment corresponds to a binary number that is larger than n. Then, for each plaintext segment, Alice computes ciphertext = plaintexte(mod n). Then she sends ciphertext to Bob recreates Alice’s original message by computing plaintext = ciphertextd(mod n).

EXAMPLE 1 We can illustrate the RSA algorithm with a simple message from Alice to Bob. q Bob is expecting to receive messages. So he constructs his keys as follows: § He chooses two prime numbers, p=3 and q=11. He computes n=p*q=33. § He finds an e such that 1<e<33 and gcd (e, 20) = 1. Then e he selects is 7.

CONT. . Then he finds the value of d such that d*e(mod(p -1)(q-1)) = 1. Hence d is 3 as 3*7(mod 20) = 1. So, 3 is the Bob’s private key. q Bob publishes (33, 7) as his public key. q Alice wishes to send the simple message 2. So Alice computes 27 (MOD 33) = 29. q Alice sends Bob the message 29. q Bob uses his private key to recreate Alice’s original message by computing 293 (MOD 33) = 2. Hence, Bob decrypts the message and read it. §

EXAMPLE 2 Sending message from Alice to Bob q Bob is expecting to receive messages. So he constructs his keys as follows: § He chooses two prime numbers, p=19 and q=31. He computes n=p*q=589. § He finds an e that has no common divisors with 18*30=540. The e he selects is 49.

CONT. . He finds a value d =1069. Notice that 1069*49 =52381. Bob needs to assure that the remainder, when 52381 is divided by 540, is 1. And it is : 52381=540*97+1. Bob’s private key is now 1069. Bob publishes (589, 49) as his public key. § q

CONT. . Alice wishes to send the simple message “A”. The ASCII code for A is 65. So Alice computes 6549(mod 589). She does without actually computing 6549. Instead, she exploits the following two facts: ni+j=ni*nj (n*m)(mod k) =(n(mod k)*m(mod k))(mod k) Combining these, we have: ni+j(mod k) = (ni(mod k)*nj(mod k))(mod k) q

CONT. . So, to compute 6549, first observe that 49 can be expressed in binary as 110001. So 49 = 1+16+32 Thus, 6549 = 651+16+32. The following table lists the required powers 65: 651(mod 589)=65 652(mod 589)=4225(mod 589)=102 654(mod 589)=1022(mod 589)=10404(mod 589)=391

CONT. . 658(mod 589)=3912(mod 589)=152881(mod 589)=330 6516(mod 589)=3302(mod 589)=108900(mod 589)=524 6532(mod 589)=5242(mod 589)=274576(mod 589)=102 So we have: 6549(mod 589) = 651+16+32(mod 589) =(651*6516*6532)(mod 589) =((651(mod 589))*(6516(mod 589))*(6532(mod 589)))(mo d 589)

CONT. . =(65*524*102)(mod 589) =((34060(mod 589))*102)(mod 589) =(487*102)(mod 589) =198 Alice sends Bob the message 198. q Bob uses his private key(1069) to recreate Alice’s message by computing 1981069(mod 589). Using the same process Alice used, he does this efficiently and retrieves the message 65.

RSA IS EFFECTIVE q q The function encrypt and decrypt are inverse of each other and it is proved using euler’s generalization of Fermat’s Little theorem. Bob can choose primes efficiently using the following algorithm. § Randomly choose two large numbers as candidates. § Check the candidates to see if they are prime. This can be done efficiently using a randomized algorithm, Fermat’s Little theorem.

FERMAT’S LITTLE THEOREM If p is prime , then, for any integer a, if gcd(a, p) = 1, ap-1 ≡ 1 (mod p). § Where , x ≡ y (mod p) means x and y have the same remainder when divided by p. § Example : p = 5 and a = 3, then , 3 (5 -1) = 81 ≡ 1 (mod 5) which is true. So, 5 passes the Fermat test at a = 3. q If p fails the Fermat’s test at ‘a’ then we will say that ‘a’ is a Fermat witness that ‘p’ is composite. q

CONT. . q § § q The theorem tells us that if ‘p’ is prime , then it must pass the Fermat test at every appropriately chosen value of a. QUESTION : If p passes the Fermat test at some value of ‘a’, do we know that p is prime? ANSWER : No Conclusion : If p is composite and yet it passes the Fermat test at ‘a’, we will say that ‘a’ is a Fermat Liar that p is prime.

CONT. . q § § § Randomly choose values for ‘a’ looking for a witness that p is composite. Note : Consider the values which are less then p only. So, if p is prime then gcd(a, p) is always 1. No need to evaluate gcd anymore in our algorithm. If we fail to find a witness that shows that p is composite, we will report that p is prime. As liars exists, increase the likelihood of finding such a witness , if one exists, by increasing the witnesses that we test.

CONT. . Algorithm : § Input : A value to be tested and the possible witnesses to be checked. § Output : Composite or Probably Prime number. § simple. Fermat(p: integer, k: integer) = Do k times. - Select a in range 2 to p-1 - If ap-1 ≡ 1 is not true , return Composite If all tests passed then return Probably Prime. q

CONT. . q Some composite numbers pass the test at all values of ‘a’ and are called ‘Carmichael numbers’. q Every value of ‘a’ is a Fermat liar for every Carmichael number, so no value of k will enable simple. Fermat to realize that a Carmichael number is not prime.

EUCLID’S ALGORITHM Successive division of 2 numbers followed by the resulting remainder divided into the divisor of each division until the remainder is equal to zero. Then the remainder of the previous division is the gcd. q Example : § Divident = Quotient * Divisor + Remainder § If a = 1071 and b = 462, gcd (1071, 462) is : Then, 1071 = 2 * 462 + 147 462 = 3 * 147 + 21 147 = 7 * 21 + 0 Stop, as remainder is 0. gcd (1071, 462) = 21 q

REFERENCES q q q Automata, Computability, and Complexity| Theory and Applications by Elaine Rich. En. wikipedia. org Presentation from the previous class

THANK YOU