[Cryptography] Vulnerability of RSA vs. DLP to single-bit faults

Peter Gutmann pgut001 at cs.auckland.ac.nz
Sat Nov 8 16:49:36 EST 2014

Another option is to perform a pairwise consistency test each time the private 
key is used.  In other words every time you generate a signature you then use 
the public-key components to verify it (which my code does anyway just as a 
general precaution).  Question: Will this catch all possible problems?


More information about the cryptography mailing list