{"id":"https://openalex.org/W2603659486","doi":"https://doi.org/10.1145/3052973.3053040","title":"On the Robustness of RSA-OAEP Encryption and RSA-PSS Signatures Against (Malicious) Randomness Failures","display_name":"On the Robustness of RSA-OAEP Encryption and RSA-PSS Signatures Against (Malicious) Randomness Failures","publication_year":2017,"publication_date":"2017-03-31","ids":{"openalex":"https://openalex.org/W2603659486","doi":"https://doi.org/10.1145/3052973.3053040","mag":"2603659486"},"language":"en","primary_location":{"id":"doi:10.1145/3052973.3053040","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3052973.3053040","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054503997","display_name":"Jacob C. N. Schuldt","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jacob C.N. Schuldt","raw_affiliation_strings":["AIST, Tokyo, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AIST, Tokyo, Japan","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064093392","display_name":"Kazumasa Shinagawa","orcid":"https://orcid.org/0000-0002-5219-1975"},"institutions":[{"id":"https://openalex.org/I146399215","display_name":"University of Tsukuba","ror":"https://ror.org/02956yf07","country_code":"JP","type":"education","lineage":["https://openalex.org/I146399215"]}],"countries":["JP"],"is_corresponding":false,"raw_author_name":"Kazumasa Shinagawa","raw_affiliation_strings":["AIST &amp; University of Tsukuba, Tsukuba, Japan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"AIST &amp; University of Tsukuba, Tsukuba, Japan","institution_ids":["https://openalex.org/I146399215"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.1384,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.37854612,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"241","last_page":"252"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10237","display_name":"Cryptography and Data Security","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10951","display_name":"Cryptographic Implementations and Security","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11693","display_name":"Cryptography and Residue Arithmetic","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/randomness","display_name":"Randomness","score":0.8562141060829163},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6104217171669006},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5760310292243958},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.5436169505119324},{"id":"https://openalex.org/keywords/random-oracle","display_name":"Random oracle","score":0.511845052242279},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.505959689617157},{"id":"https://openalex.org/keywords/cryptographic-primitive","display_name":"Cryptographic primitive","score":0.5021536350250244},{"id":"https://openalex.org/keywords/encryption","display_name":"Encryption","score":0.4504771828651428},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.40215638279914856},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.3415558934211731},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.3117300271987915},{"id":"https://openalex.org/keywords/public-key-cryptography","display_name":"Public-key cryptography","score":0.24777424335479736},{"id":"https://openalex.org/keywords/cryptographic-protocol","display_name":"Cryptographic protocol","score":0.2380928099155426},{"id":"https://openalex.org/keywords/statistics","display_name":"Statistics","score":0.10371768474578857}],"concepts":[{"id":"https://openalex.org/C125112378","wikidata":"https://www.wikidata.org/wiki/Q176640","display_name":"Randomness","level":2,"score":0.8562141060829163},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6104217171669006},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5760310292243958},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.5436169505119324},{"id":"https://openalex.org/C94284585","wikidata":"https://www.wikidata.org/wiki/Q228184","display_name":"Random oracle","level":4,"score":0.511845052242279},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.505959689617157},{"id":"https://openalex.org/C15927051","wikidata":"https://www.wikidata.org/wiki/Q246593","display_name":"Cryptographic primitive","level":4,"score":0.5021536350250244},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.4504771828651428},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.40215638279914856},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3415558934211731},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3117300271987915},{"id":"https://openalex.org/C203062551","wikidata":"https://www.wikidata.org/wiki/Q201339","display_name":"Public-key cryptography","level":3,"score":0.24777424335479736},{"id":"https://openalex.org/C33884865","wikidata":"https://www.wikidata.org/wiki/Q1254335","display_name":"Cryptographic protocol","level":3,"score":0.2380928099155426},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.10371768474578857},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3052973.3053040","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3052973.3053040","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.6700000166893005,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G4765225092","display_name":"Development of Practical and Error-Resilient Encryption and Authentication Mechanisms for Cloud-based Security Systems","funder_award_id":"15K16006","funder_id":"https://openalex.org/F4320334764","funder_display_name":"Japan Society for the Promotion of Science"}],"funders":[{"id":"https://openalex.org/F4320334764","display_name":"Japan Society for the Promotion of Science","ror":"https://ror.org/00hhkn466"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W135111244","https://openalex.org/W298908593","https://openalex.org/W1502927489","https://openalex.org/W1519317114","https://openalex.org/W1552695147","https://openalex.org/W1561907855","https://openalex.org/W1574314127","https://openalex.org/W1598210976","https://openalex.org/W1646354800","https://openalex.org/W1751997554","https://openalex.org/W1805549252","https://openalex.org/W1857692135","https://openalex.org/W1976476866","https://openalex.org/W2002779219","https://openalex.org/W2012076388","https://openalex.org/W2052267638","https://openalex.org/W2098443120","https://openalex.org/W2101022010","https://openalex.org/W2101774955","https://openalex.org/W2101803085","https://openalex.org/W2102298648","https://openalex.org/W2108834246","https://openalex.org/W2134101189","https://openalex.org/W2149093588","https://openalex.org/W2158276883","https://openalex.org/W2162653919","https://openalex.org/W2169455260","https://openalex.org/W2405015683","https://openalex.org/W2407063206","https://openalex.org/W2417253018","https://openalex.org/W2417376317","https://openalex.org/W2561675875","https://openalex.org/W2753555060","https://openalex.org/W2911646439"],"related_works":["https://openalex.org/W18954787","https://openalex.org/W3138083505","https://openalex.org/W4254460476","https://openalex.org/W2134722839","https://openalex.org/W2783353176","https://openalex.org/W2339543721","https://openalex.org/W1514794536","https://openalex.org/W1829339118","https://openalex.org/W87530933","https://openalex.org/W3179891621"],"abstract_inverted_index":{"It":[0],"has":[1],"recently":[2],"become":[3],"apparent":[4],"that":[5,35],"both":[6],"accidental":[7],"and":[8,16,25,58,79,91,120,191,210,227,238],"maliciously":[9],"caused":[10],"randomness":[11,69,98,106,134,146,171,189,215,250],"failures":[12,216],"pose":[13],"a":[14,101,175,194,219],"real":[15],"serious":[17],"threat":[18],"to":[19,82,142],"the":[20,31,54,67,89,109,116,132,139,145,149,157,160,187,192,206],"security":[21,70,177],"of":[22,33,104,169,208,235,241],"cryptographic":[23],"primitives,":[24],"in":[26,63,108,212],"response,":[27],"researchers":[28],"have":[29],"begone":[30],"development":[32],"primitives":[34],"provide":[36],"robustness":[37],"against":[38],"these.":[39],"In":[40],"this":[41],"paper,":[42],"however,":[43],"we":[44,52,222],"focus":[45],"on":[46,186],"standardized,":[47],"widely":[48],"available":[49],"primitives.":[50],"Specifically,":[51],"analyze":[53],"RSA-OAEP":[55,94,209,226],"encryption":[56,95],"scheme":[57,163],"RSA-PSS":[59,161,211],"signature":[60,83,162],"schemes,":[61,231],"specified":[62],"PKCS":[64],"#1,":[65],"using":[66],"related":[68,97,105,133,170,188],"notion":[71],"introduced":[72],"by":[73],"Paterson":[74],"et":[75],"al.":[76],"(PKC":[77],"2014)":[78],"its":[80],"extension":[81],"schemes.":[84],"We":[85,152],"show":[86,154],"that,":[87,155,224],"under":[88,156,180,247],"RSA":[90,158],"\u03a6-hiding":[92],"assumptions,":[93],"is":[96,118,164],"secure":[99,122,165,246],"for":[100,148,166],"large":[102],"class":[103,168],"functions":[107,135,190],"random":[110],"oracle":[111],"model,":[112],"as":[113,115,129,131],"long":[114,130],"recipient":[117],"honest,":[119],"remains":[121],"even":[123],"when":[124],"additionally":[125],"considering":[126],"malicious":[127,140],"recipients,":[128],"does":[136],"not":[137,245],"allow":[138],"recipients":[141],"efficiently":[143],"compute":[144],"used":[147],"honest":[150],"recipient.":[151],"furthermore":[153],"assumption,":[159],"any":[167],"functions,":[172],"although":[173],"with":[174],"non-tight":[176],"reduction.":[178],"However,":[179],"additional,":[181],"albeit":[182],"somewhat":[183],"restrictive":[184],"assumptions":[185],"adversary,":[193],"tight":[195],"reduction":[196],"can":[197],"be":[198,218],"recovered.":[199],"Our":[200],"results":[201],"provides":[202],"some":[203],"reassurance":[204],"regarding":[205],"use":[207],"environments":[213],"where":[214],"might":[217],"concern.":[220],"Lastly,":[221],"note":[223],"unlike":[225],"RSA-PSS,":[228],"several":[229],"other":[230],"including":[232],"RSA-KEM,":[233],"part":[234,240],"ISO":[236],"18033-2,":[237],"DHIES,":[239],"IEEE":[242],"P1363a,":[243],"are":[244],"simple":[248],"repeated":[249],"attacks.":[251]},"counts_by_year":[{"year":2020,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
