News Release

Article to Appear in the Notices

The Mathematics of Data Encryption

For Further Information, Please Contact: Dan Boneh, Computer Science, Stanford University (650) 725-3897 or (650) 723-4377, daba@cs.stanford.edu

For More Information, Please Contact: Tim Goggins, AMS (401) 455-4110, tjg@ams.org

December 31, 1998

Providence, RI -- Today's world of electronic credit card payments, email, and commerce over the World Wide Web would not be possible without secure methods of transferring information. These methods use data encryption schemes that are based on mathematics.

One of the most common schemes is called the RSA cryptosystem, which gets its name from the last-name initials of its inventors, Ron Rivest, Adi Shamir, and Len Adelman, who came up with the idea in the 1970s. Since that time, researchers have probed the vulnerability of RSA in an effort to understand how secure the system really is.

The enclosed article, "Twenty Years of Attacks on the RSA Cryptosystem," by Dan Boneh, surveys a number of ways in which researchers have tried to expose weaknesses in the RSA system. These efforts range from easily avoidable attacks that seize upon misuses of the RSA system, to more sophisticated ones that exploit some deep results in mathematics, to ones based on observations of the time it takes to perform calculations needed for RSA. Boneh's conclusion is that, although some insightful attacks have been found, "At the moment it appears that proper implementations [of RSA] can be trusted to provide security in the digital world."

The RSA system uses the fact that an efficient method for factoring numbers into their prime factors has not been discovered---in fact, it is widely believed that no such method exists. An important open question in this area of research is whether cracking the RSA cryptosystem is as hard as factoring. The article mentions a recent result by Boneh and his co-author, R. Venkatesan, which provides evidence that, in certain cases, the answer to this question may be no. "Twenty Years of Attacks on the RSA Cryptosystem" will appear in the March 1999 issue of Notices of the AMS.