AlpacaHack Logo

Challenges

Sign InSign Up

Rows:

CHALLENGEAUTHORS

SOLVES

(CURRENT)

Loading challenges...

Rows:

Even Worse RSA

Daily AlpacaHackTopic: Number TheoryReleased: May 23, 2026

54 solves
Crypto
Hard

by

minaminao

minaminao

It seems one-p-rsa has been defeated ...

Beginner Hint 1 (AI-translated)
  • Unlike one-p-rsa, the exponent e is changed from 65537 to 65538.
  • As a result, the naive solution for one-p-rsa no longer works.
  • First, think about why the original approach stops working.
Beginner Hint 2 (AI-translated)
  • In one-p-rsa, p-1 and e were coprime, so it was possible to compute the inverse of e modulo p-1.
  • This challenge is different. Since e factors as 2 * 3^2 * 11 * 331, gcd(e, p-1) is even. It also has about a 1/2 chance to be a multiple of 3, because p-1 mod 3 is either 0 or 1.
  • In this case, how can we solve it?
  • By leveraging SageMath, you can solve it more easily.
even-worse-rsa.tar.gz

Please sign in to submit the flag.

descriptionsolveswriteups