Attack on two-way RSA key agreement protocol

Abstract

In this paper we discuss a small subgroup attack, a triangle attack, and an unknown key-share attack, and their application on the two-way RSA key agreement protocol. We explain the Msumptions for exploring these attacks and the practical circumstances where the assumptions hold. Finally, the countermeasures to avoid these attacks will also be discussed.