References

1. Rivest, R. L., A. Shamir, and L. Adleman, "A Method for Obtaining Digital Signatures and Public-Key Cryptosystems", Communications of the ACM , No. 21, 1978, pp. 120 “126.

2. Coppersmith, D., et al., "Low-Exponent RSA with Related Messages", Proc. Eurocrypt'96 , Berlin, Germany: Springer LNCS 1070, 1996, pp. 1 “9.

3. Coppersmith, D., "Finding a Small Root of a Univariate Modular Equation", Proc. Eurocrypt'96 , Berlin, Germany: Springer LNCS 1070, 1996, pp. 155 “165.

4. EMVCo, EMV 2000 Integrated Circuit Card Specification for Payment Systems, BOOK 2 ”Security and Key Management , Version 4.0, December 2000, http://www.emvco.com/specifications.cfm.

5. Coron J.-S., D. Naccache, and J. P. Stern, "On the Security of RSA Padding", Proc. Crypto'99 , Berlin, Germany: Springer LNCS 1666, 1999, pp. 1 “18.

6. Coppersmith, D., S. Halevi, and C. Jutla, "ISO 9796 1 and the New Forgery Strategy", Research contribution to P1363 (1999) , http://grouper.ieee.org/groups/1363/Research/cryptanalysis.html#attack9796.

7. Grieu, F., "A Chosen Messages Attack on the ISO/IEC 9796-1 Signature Scheme", Proc. Eurocrypt 2000 , Berlin, Germany: Springer LNCS 1807, 2000, pp. 70 “80.

8. Girault, M., and J.-F. Misarsky, "Cryptanalysis of Countermeasures Proposed for Repairing ISO 9796-1", Proc. Eurocrypt 2000 , Berlin, Germany: Springer LNCS 1807, 2000, pp. 81 “90.

9. RSA Laboratories, PKCS#1: RSA Encryption Standard , version 1.5, November 1993.