cryptopal.py 文件源码

def rsa_broadcast_attack(pairs, exponent=3):
  ns = [n for n, c in pairs]
  cs = [c for n, c in pairs]

  N = reduce(mul, ns)

  ms = []
  for n in ns:
    ms.append(N // n)

  res = 0
  for c, m, n in zip(cs, ms, ns):
    res += c * m * inverse(m, n)

  res %= N
  rec, _ = iroot(res, exponent)

  return long_to_bytes(rec)