Technique for reducing RSA Crypto variable storage
AssigneeInternational Business Machines Corporation
InventorStephen M. Matyas
Life of this patent
Estimating the term…
Loading patent…
AssigneeInternational Business Machines Corporation
InventorStephen M. Matyas
Estimating the term…
A technique for reducing RSA (Rivest, Shamir and Adleman algorithm) cryptovariable key from 1200 bits (400-bit public key, 400-bit secret key and 400-bit modulus) to 106 bits makes feasible the storage of the RSA algorithm parameters on current magnetic stripe cards used by the banking and finance industry. Of the 106 bits required, only 56 bits must be kept secret; the remaining 50 bits are nonsecret. These 106 bits are used to derive two 200-bit primes P and Q from which is computed the modulus N=PQ and two 400-bit keys PK (public key) and SK (secret key). In effect, a savings in storage is achieved at the expense of performing a precomputation to derive the modulus and keys each time the system is utilized for encryption/decryption. The 56-bit value plus the additional 50 bits of nonsecret data can be used to generate the RSA cryptovariables in systems where the RSA algorithm has been implemented. In another embodiment, a technique is provided for reducing the RSA cryptovariable storage of the public key PK and modulus from 800 bits to 260 bits. These 260 bits can be used at any later time to derive the 400-bit public key PK and 400-bit modulus N=PQ. The savings in storage is achieved by performing a precomputation each time the system is utilized for encryption/decryption.
A method of personal identification for a user of a multiterminal system, said method being based on a public key cryptosystem of the modulo exponentiation type whose modulus is the product of two prime binary numbers and comprising the steps of:
In a public key cryptosystem of the modulo exponentiation type whose modulus is the product of two prime binary numbers P and Q, a method of generating at least one of the primes P and the modulus, comprising the steps of:
A method of transmitting a public key and modulus to a requesting user from a key distribution center, said public key and modulus being used in a public key cryptosystem of the modulo exponentiation type whose modulus is the product of two prime binary numbers, said method of transmitting comprising the steps of:
A method of transmitting a public key and modulus to a requesting user from a key distribution center, said public key and modulus being used in a public key cryptosystem of the modulo exponentiation type whose modulus is the product of two prime binary numbers, said method of transmitting comprising the steps of:
In public key cryptosystem of the modular exponentiation type, a method of generating an n-bit modulus N as the function CR+S of a nonsecret r-bit first binary number R, a nonsecret s-bit second binary number S, and a c-bit system constant C, where s<c+r, said method comprising the steps of
In a public key cryptosystem of the modulo exponentiation type whose modulus is the product of two prime binary number P and Q, a method of generating a cryptovariable corresponding to at least one of the primes P in the modulus comprising the steps of:
Dependencies are inferred from the claim text.