Solution

ID: past-exam-of-the-mathematics-course-of-the-university-of-cambridge/2024/ii/paper-2/12k/b/iii/solution

Yes. Your public and private exponents reveal , a nonzero multiple of . The standard RSA private exponent reveals the factorization algorithm uses repeated squaring of random residues to obtain a nontrivial square root of one and hence factors with a greatest common divisor. Once and are known, compute and invert every other customer's public exponent to obtain that customer's private exponent.

New to topics? Read the docs here!