## CryptoDB

### Paper: Fast Distributed RSA Key Generation for Semi-honest and Malicious Adversaries

Authors: Tore Kasper Frederiksen Yehuda Lindell Valery Osheter Benny Pinkas DOI: 10.1007/978-3-319-96881-0_12 Search ePrint Search Google Slides CRYPTO 2018 We present two new, highly efficient, protocols for securely generating a distributed RSA key pair in the two-party setting. One protocol is semi-honestly secure and the other maliciously secure. Both are constant round and do not rely on any specific number-theoretic assumptions and improve significantly over the state-of-the-art by allowing a slight leakage (which we show to not affect security).For our maliciously secure protocol our most significant improvement comes from executing most of the protocol in a “strong” semi-honest manner and then doing a single, light, zero-knowledge argument of correct execution. We introduce other significant improvements as well. One such improvement arrives in showing that certain, limited leakage does not compromise security, which allows us to use lightweight subprotocols. Another improvement, which may be of independent interest, comes in our approach for multiplying two large integers using OT, in the malicious setting, without being susceptible to a selective-failure attack.Finally, we implement our malicious protocol and show that its performance is an order of magnitude better than the best previous protocol, which provided only semi-honest security.
##### BibTeX
@inproceedings{crypto-2018-28817,
title={Fast Distributed RSA Key Generation for Semi-honest and Malicious Adversaries},
booktitle={Advances in Cryptology – CRYPTO 2018},
series={Lecture Notes in Computer Science},
publisher={Springer},
volume={10992},
pages={331-361},
doi={10.1007/978-3-319-96881-0_12},
author={Tore Kasper Frederiksen and Yehuda Lindell and Valery Osheter and Benny Pinkas},
year=2018
}