Glenn Durfee
More info
- Affiliation
- Stanford (PhD student of Dan Boneh)
- Known for
- Boneh–Durfee attack
Cryptanalyst whose name is welded to Dan Boneh's in the attack that recovers a too-small private RSA exponent from the public key.
Wiener's attack from 1990 broke RSA when the private exponent d was below roughly N0.25. At Eurocrypt 1999 Boneh and Durfee pushed the bound to N0.292 by recasting the problem as finding small roots of a polynomial and solving it with Coppersmith's lattice techniques. Nobody has since proved the bound can't be pushed further.
A year earlier, Boneh, Durfee and Yair Frankel showed that with a small public exponent, leaking a quarter of the private key's bits is enough to reconstruct the rest. Both results landed on every list of things not to do to save a few clock cycles.