Lets prime factorize $30$:
$$30 = 3 \cdot 10 = 3 \cdot 2 \cdot 5$$
We see that the number $30$ is a product of $3$ primes. But in RSA, when factorizing huge numbers, we always seem to only get two primes. Why is this??
Asked
Active
Viewed 252 times
0
-
2Does this answer your question? Are there any standards of multi-prime RSA key generation? – kelalaka Mar 19 '20 at 12:34
-
5Because RSA modulus are not just random big numbers: they are built by first sampling two primes, and then multiplying them together. – Geoffroy Couteau Mar 19 '20 at 12:59
-
Thank you Geoffroy Couteau. Since primes are rather "unusual", especially the bigger the number, won't that leave a manageable (for a computer) amount of products to "choose" from. A hacker/decoder might have a library of prime products and will be able to look up the chosen number. – Kristian Francisco Milla Niels Mar 19 '20 at 13:21
-
2@KristianFranciscoMillaNiels see this other question – SEJPM Mar 19 '20 at 13:35
-
@KristianFranciscoMillaNiels Also see the GCD Them ALL – kelalaka Mar 19 '20 at 14:17
1 Answers
1
By construction, RSA moduli are the product of two large primes.
user432944
- 305
- 1
- 8
-
1Or more. Depends on how the RSA moduli is generated. Muliprime RSA is a thing, we even have a [tag:multi-prime-RSA] tag for it. In particular, there is provision for it in the private key format defined by PKCS#1v2.2. – fgrieu Apr 18 '20 at 21:38
-
Three factors would be very useful if someone finds an ingenious method to factor products of two large primes which is useless for products of three large primes. Which is quite conceivable. – gnasher729 Apr 19 '20 at 09:23
-
@gnasher729: the reason usually driving the use of $f>2$ factors are (A) speed of the private key operation (using the CRT method) for a given public modulus size : when modular multiplication with $b$-bit arguments has cost proportional to $b^2$, the speedup is by a factor $f^2/4$, that is over a factor of two for $f=3$; and (B) allowing to work around a limitation on $b$ in the hardware doing fast modular arithmetic, which for a given public modulus size operates with arguments of size inversely proportional to $f$. – fgrieu Apr 19 '20 at 12:20