Suppose we have an RSA-Oracle that can encrypt and decrypt our input. The the decryption output is equal to: $ (C^d \mod N) \mod 2^n $.
How can I extend the LSB oracle attack, using the using knowledge about the last n-bits of the plaintext?
Asked
Active
Viewed 252 times
3
