I've heard differing opinions/statements of fact from different professors and sources as to whether cracking RSA is "thought" to be in NP, or known to be an NP-complete problem. Can anyone shed light on this discrepancy? which is it, or do we know?

migrated from cstheory.stackexchange.com Aug 16 '11 at 5:02

This question came from our site for theoretical computer scientists and researchers in related fields.

up vote 10 down vote accepted

Proving that breaking any cryptosystem is $\mathsf{NP}$-complete would be a great achievement in cryptography, since $\mathsf{P} \neq \mathsf{NP}$ is probably the most "standard" hardness assumption around. For the case of RSA, security of the system is based on hardness of the integer factorization problem. This problem lies in the intersection of $\mathsf{NP}$ and $\mathsf{coNP}$, and is thus unlikely to be $\mathsf{NP}$-complete. However, it's obviously in $\mathsf{NP}$ (just guess the private key, and decrypt).

  • 7
    iirc then cracking RSA is not even known to be equivalent to factoring. It could be the case that factoring is hard, but cracking RSA is easy. – Artem Kaznatcheev Aug 16 '11 at 3:07
  • 1
    There have been a number of non-number-theoretical attempts on NP-complete cryptosystems too (for instance, systems based on the knapsack problem), but all of those have had specialized constructions that turn out to yield non-NP-complete versions of the appropriate problem. In fact, proving the secureness of an encryption scheme (more specifically, proving the existence of one-way functions) is even harder than proving the P-NP separation, since IIRC there are worlds where P is inequal to NP but one-way functions don't exist. – Steven Stadnicki Aug 16 '11 at 7:17

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.