How is RSA used?
We now know how to encode and decode a message x.
But how is this used in practice?
An example:
Payments over the internet
Suppose you want to order an item from a mail order company and pay for it
via the internet.
Now you don't want to send your credit card number over the net to this
company just like that. The chances that this number falls into the wrong
hands are too big. To warrant safe communication with this company, the
communication will be encoded.
The company chooses two primes p and q and appropriate
encoding number v, decoding number w and modulus m = pq.
The numbers v and m are made public by the company.
If you now place your order and want to send your credit card number, you
first encode your message (including the credit card number)
with the help of the encoding number v
and the modulus m. Then you send the encoded message to the company.
The mail order company knows the decoding number w and the
modulus m and can now decode your message.
However, anyone who does not know w, cannot decode your message.
How secure is RSA?
The security of RSA depends of course on the difficulty of computing the
decoding number w. To find out this number it is necessary to know
the two primes p and q. Once you know these primes it is a piece
of cake to find w. But, as we have already seen in
Chapter 1, factoring
the modulus m = pq into p and q is an extremely difficult
and time-consuming task (provided m is chosen sufficiently
large):
if one chooses two very big primes p and q, then it is almost
impossible to find the factorization of the modulus m = pq.
The RSA cryptosystem therefore provides excellent security.