Same problem as the previous similar name challenge. But there is a twist this time. There is a check of (3*d)**4 > N
, which effectively renders Weiner’s attack useless.
We can use Boneh-Durfee Attack. Awesome script at this link. The Github repo contains some useful scripts.
Boneh-Durfee Attack limit:
From the retrieved d
, we can easily recover the plaintext.
Seems like there is another solution by aloof
, which I am too lazy to type so here’s the screenshot of the math involved.
Sage Implementation:
|
|