Tags: rsa factoring coppersmith 

Rating: 5.0

tldr; common factorization methods with quirks:

  • close primes: exhaustively search for small params + coppersmith's small roots
  • pollard’s p-1: p-1 and q-1 contain big, shared prime which needs to be mixed into the algorithm
  • ROCA: that one is exactly as in the paper
Original writeup (https://grosquildu.github.io/crypto/2019/11/10/pwn2win-matRoSkA/).