Digital signatures, continued.Consider the signature scheme of Exercise 1.45.

(a) Signing involves decryption, and is therefore risky. Show that if Bob agrees to sign anything he is asked to, Eve can take advantage of this and decrypt any message sent by Alice to Bob.

(b) Suppose that Bob is more careful, and refuses to sign messages if their signatures look suspiciously like text. (We assume that a randomly chosen messagethat is, a random number in the range{1,...,N-1} is very unlikely to look like text.) Describe a way in which Eve can nevertheless still decrypt messages from Alice to Bob, by getting Bob to sign messages whose signatures look random.

Short Answer

Expert verified

a) The encryption and decryption of the message are secured by using a digital signature.

b) The procedure for decryption is developed in such a way that Eve cannot access the message of Alice and Bob.

Step by step solution

01

Explain digital signature

The public-key cryptosystem allows sending messages between Alice and Bob.The third-party Eve tries to access the message using some calculations on the hash function.The digital locking of the keys provides security to the communication.The security is implemented using RSA digital signature methods.

02

To show that the encryption and decryption of the message are secured by using a digital signature

(a)

Using the RSA algorithm, Alice sends the encrypted messageE=MemodNto Bob.

During decryption, when Eve tries to intercept the message, then Alice asks Bob that to just sign in using his private key to get the messageM=(Me)dmodN.

This process of RSA encryption is ensured by a digital signature certificate.The Certificate Authority (CA) prevents Eve from accessing the key pair of Alice.The CA claims that it is Bob’s public key.

Suppose, Eve tries to send a message with the sign of Bob, Alice checks the validated public key of Bob and compares the hash result.

Then it fails the decryption. Thus, it will not work for Eve.

Therefore, the encryption and decryption of the message are secured by using a digital signature.

03

To show that Eve cannot access message

(b).

The correctness of the RSA algorithm is used for implementing the decryption procedure.By using the procedure, the access of Bob’s key by Eve does not work.A locking key pair is generated.So that, Eve cannot tamper with the message.

Decryption procedure:

The decryption procedure for the message that Eve does not get access to the key by using a random number is as follows.

  • Choose two random prime numbersr,s.
  • Calculaten=r×s.
  • Calculate(n)=(r1)×(s1).
  • Choose a numbersuch as1<e<(n).
  • The number eis co-prime to(n).
  • Calculategcd(e,(n))=1.
  • Calculate the keydsuch thatd.e1mod(n).
  • Public key is taken aseand the private key is taken asd.

By using the above procedure, the public and private key pairs are generated.The public key of Alice is known to Bob and vice versa.

Thus, Eve cannot access the message from Alice to Bob.

Therefore, the procedure for decryption is developed in such a way that Eve cannot access the message of Alice and Bob.

Unlock Step-by-Step Solutions & Ace Your Exams!

  • Full Textbook Solutions

    Get detailed explanations and key concepts

  • Unlimited Al creation

    Al flashcards, explanations, exams and more...

  • Ads-free access

    To over 500 millions flashcards

  • Money-back guarantee

    We refund you if you fail your exam.

Over 30 million students worldwide already upgrade their learning with Vaia!

One App. One Place for Learning.

All the tools & learning materials you need for study success - in one app.

Get started for free

Most popular questions from this chapter

RSA and digital signatures. Recall that in the RSA public-key cryptosystem, each user has a public key P=(N,e) and a secret key d. In a digital signature scheme, there are two algorithms, sign and verify. The sign procedure takes a message and a secret key, then outputs a signature σ. The verify procedure takes a public key (N,e), a signature σ, and a message M, then returns “true” if σcould have been created by sign (when called with message M and the secret key (N, e) corresponding to the public key ); “false” otherwise.

(a)Why would we want digital signatures?

(b) An RSA signature consists of sign, (M,d)=Md(modN)where d is a secret key and N is part of the public key . Show that anyone who knows the public key (N,e)can perform verify ((N,e),Md,M), i.e., they can check that a signature really was created by the private key. Give an implementation and prove its correctness.

(c) Generate your own RSA modulus, N=pq public key e, and private key d (you don’t need to use a computer). Pick p and q so you have a 4-digit modulus and work by hand. Now sign your name using the private exponent of this RSA modulus. To do this you will need to specify some one-to-one mapping from strings to integers in [0,N-1]. Specify any mapping you like. Give the mapping from your name to numbers m1,m2,...mk,then sign the first number by giving the value md1(modN), and finally show that .

(md1)e=m1(modN)

(d) Alice wants to write a message that looks like it was digitally signed by Bob. She notices that Bob’s public RSA key is (17,391). To what exponent should she raise her message?


Show that in any base b2, the sum of any three single-digit numbers is at most two digits long.

Show that if ab(modN)and if M Divides Nthenab(modM)

The algorithm for computing abmodCby repeated squaring does not necessarily lead to the minimum number of multiplications. Give an example of b>10where the exponentiation can be performed using fewer multiplications, by some other method.

Justify the correctness of the recursive division algorithm given in page 25, and show that it takes time O(n2)onn- bit inputs.

See all solutions

Recommended explanations on Computer Science Textbooks

View all explanations

What do you think about this solution?

We value your feedback to improve our textbook solutions.

Study anywhere. Anytime. Across all devices.

Sign-up for free