|
Abstract : |
We describe ecient techniques for a number of parties to jointly generate an RSA key. At the end of the protocol an RSA modulus N = pq is publicly known. None of the parties know the factorization of N. In addition a public encryption exponent is publicly known and each party holds a share of the private exponent that enables threshold decryption. Our protocols are ecient in computation and communication. All results are presented in the honest but curious settings (passive adversary)., |
