Attacks on Shamir's 'RSA for paranoids'

In order to allow for efficient use of extremely large moduli, Adi Shamir has proposed a variant of RSA in which one of the two prime factors is much smaller than the other. This node points out that unless special precautions are taken, simple implementations of Shamir's idea are subject to protocol attacks that recover the secret keys. (C) 1998 Published by Elsevier Science B.V. All rights reserved

Theoretical and practical efficiency aspects in cryptography

EThOS - Electronic Theses Online ServiceGBUnited Kingdo