[7619] in cryptography@c2.net mail archive
Re: names to say in late september
daemon@ATHENA.MIT.EDU (dmolnar)
Mon Jul 31 14:23:08 2000
Date: Sun, 30 Jul 2000 23:51:14 -0400 (EDT)
From: dmolnar <dmolnar@hcs.harvard.edu>
To: "Arnold G. Reinhold" <reinhold@world.std.com>
Cc: cryptography@c2.net
In-Reply-To: <v04210105b5aa2a00dcb4@[24.218.56.92]>
Message-ID: <Pine.OSF.4.05.10007302341440.16705-100000@hcs.harvard.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
On Sun, 30 Jul 2000, Arnold G. Reinhold wrote:
> By the way, I could not find the April 2000 RSA Data Security
> Bulletin on three primes at
> http://www.rsasecurity.com/rsalabs/bulletins/index.html Is there a
> better link?
The link I had in mind was
ftp://ftp.rsasecurity.com/pub/pdfs/bulletn13.pdf
The discussion is an appendix to the discussion of RSA key lengths.
Note that it is actually more general than just 3 primes; various
combinations of number of primes and their length are discussed,
along with security against known factoring algorithms.
Even if you may disagree with Silverman's assumptions about "safe"
security levels, this is a very good place to start when looking at
RSA with more than two factors. As for terminology, I would prefer to keep
the RSA name and just modify it (e.g. "polyprime RSA," or better
"3-384-prime RSA") to indicate that a modulus with more than two factors
is in use.
-David
