Abstract

The paper considers the problem of distributed key generation for shared-control RSA schemes. In particular: how can two parties generate a shared RSA key in such a way that neither party can cheat? The answer to this question would have significant applications to, for example, key escrow systems. Cocks has recently proposed protocols to solve this problem in the case when both parties act honestly. However, we show that the Cocks protocols [6] are insecure if a dishonest party actively deviates from the protocol. A new protocol which resists these active attacks is proposed. Keywords: active attack, distributed key generation, RSA. Shared Generation of Shared RSA Keys 1 1 Introduction This paper considers the following problem: how can two parties generate a shared RSA key pair? The generation method should preclude either party individually from compromising the key pair. Our aim is to provide an efficient two-party shared RSA key generation protocol to solve this problem. Share...

Citations