How deeply does Hacking Cryptography cover selective forgery attack?

Defines the attack and names a concrete RSA exploit, but defers its implementation details to a separate treatment.

Selective forgery attack

A selective forgery attack enables an attacker to forge valid signatures for messages satisfying specified constraints.

A selective forgery attack produces valid digital signatures without recovering the private key, but only for messages meeting specified constraints. Unlike universal forgery, it does not cover every attacker-chosen message; unlike existential forgery, it targets a restricted message class. section 9.3

Bleichenbacher RSA forgery

Under specific conditions, including an RSA public exponent of 3, an attacker can forge signatures for messages whose digest ends with a bit set to 1. Insufficient padding validation makes the constrained forgery possible. section 9.3 section 9.7

Distinguish the attack classes and defensive implications:

Universal forgery signs any chosen message, whereas selective forgery signs only messages satisfying constraints. section 9.3
Enforce message formatting and padding rules; PKCS #1 v1.5 supplies formatting constraints for RSA signatures. section 9.7

How Hacking Cryptography covers it

liveBook manning.com

Read Hacking Cryptography on liveBook Get the book at manning.com

Related concepts

signature forgery attackkind of · A signature forgery attack produces a signature that a verifier accepts as authentic without authorization from the legitimate signer's private key.
Bleichenbacher's e=3 forgery attackincludes · Bleichenbacher's e=3 forgery attack is an RSA signature-forgery attack that exploits lax validation of PKCS #1 v1.5 signature padding when the public exponent is 3.
universal forgery attackcontrasts with · A universal forgery attack enables an attacker to forge valid signatures for arbitrary attacker-chosen messages.

This explainer was generated by Manning's knowledge graph from the text of Hacking Cryptography. The section links point to the parts of the book it draws on.