Rabin cryptosystem

E836301

The Rabin cryptosystem is a public-key encryption scheme based on the hardness of integer factorization, notable for its provable security equivalence to factoring and its similarity to RSA.

All labels observed (1)

Label Occurrences
Rabin cryptosystem canonical 3

How this entity was disambiguated

Statements (48)

Predicate Object
instanceOf encryption scheme ⓘ
public-key cryptosystem ⓘ
advantageOverRSA tighter reduction to factoring ⓘ
basedOn integer factorization problem ⓘ
category number-theoretic cryptosystem ⓘ
trapdoor one-way function based scheme ⓘ
ciphertextComputation c ≡ m^2 mod n ⓘ
ciphertextSpace integers modulo n ⓘ
contrastWith RSA where security equivalence to factoring is not proven ⓘ
decryptionAmbiguity 4-to-1 mapping from plaintexts to ciphertexts ⓘ
decryptionComplexity polynomial time in log n given factors ⓘ
decryptionStep compute square roots of c modulo p and q ⓘ
use Chinese Remainder Theorem to combine roots ⓘ
definedOver Blum integers ⓘ
linked to: Blum integer
disadvantageComparedToRSA decryption yields four candidates ⓘ
encryptionComplexity polynomial time in log n ⓘ
encryptionDeterministic true ⓘ
hasIssue multiple possible plaintexts per ciphertext ⓘ
hasProperty encryption is as hard as factoring in the worst case ⓘ
hasSecurityProperty provable security equivalence to integer factorization ⓘ
influenced design of provably secure public-key schemes ⓘ
introducedBy Michael O. Rabin ⓘ
linked to: Michael Rabin
introducedInYear 1979 ⓘ
keyGenerationStep choose large primes p and q ⓘ
compute n = p·q ⓘ
mathematicalTool Chinese Remainder Theorem ⓘ
modular arithmetic ⓘ
modulusProperty n = p·q where p ≡ 3 (mod 4) ⓘ
n = p·q where q ≡ 3 (mod 4) ⓘ
namedAfter Michael O. Rabin ⓘ
linked to: Michael Rabin
plaintextSpace integers modulo n ⓘ
privateKey (p, q) ⓘ
privateKeyComponent prime factor p of n ⓘ
prime factor q of n ⓘ
provableEquivalence breaking scheme is equivalent to factoring n ⓘ
publicKey n ⓘ
publicKeyComponent modulus n ⓘ
requires Blum integer modulus ⓘ
requiresAssumption difficulty of factoring large composite integers ⓘ
requiresForPracticalUse CCA-secure padding or transformation ⓘ
requiresForUniqueness redundancy in plaintext ⓘ
structured padding scheme ⓘ
securityReducesTo factoring the modulus n ⓘ
similarTo RSA cryptosystem ⓘ
trapdoorFunction modular squaring with factorization trapdoor ⓘ
usedIn theoretical cryptography ⓘ
usesOperation modular squaring ⓘ
vulnerableTo chosen-ciphertext attacks without proper padding ⓘ

How these facts were elicited

Referenced by (3)

Full triples — surface form annotated when it differs from this entity's canonical label.

Michael O. Rabin → knownFor → Rabin cryptosystem ⓘ
subject linked to: Michael Rabin
Michael Oser Rabin → notableWork → Rabin cryptosystem ⓘ
Michael Oser Rabin → knownFor → Rabin cryptosystem ⓘ