A cube root of m is a value s whose third power equals m. In RSA signatures with public exponent e=3, attackers seek s such that s³ produces a desired padded message. section 9.6.3
Cube-rooting supports two partial-match strategies:
- Prefix cube rooting finds s whose cube begins with a target prefix, ignoring trailing bytes. section 9.6.3
- Suffix cube rooting finds s whose cube ends with a target suffix, using bitwise correction. section 9.6.3
Prefix-root test
A Go test computes a cube root for a random number and verifies that cubing 0xc15681d517f8d4fa produces the required prefix 0x6E46048A.
