On the security of multi-prime RSA

Abstract

Abstract Multi-prime RSA is a variant of RSA in which the modulus is the product of more than two distinct primes. In this work we collect the strongest known algebraic attacks on multi-prime RSA, including factoring, small private exponent, small CRT exponent and partial key exposure attacks.