Therefore , they apparently seem to be resistant. However , multiplicative attacks can sometimes be rewritten in order to be applicable on these latter systems. The last category of attacks does not really result from a weakness of RSA but rather from a bad implementation.
Parameters have to be carefully chosen.
Unfortunately , there is no general recipe to extend this kind of attack. KMOV is also homomorphic and is therefore susceptible to the same attack. This is not the case for LUC and Demytko s system. The authors show that the presence of transient faults is dangerous when encrypting messages with the RSA cryptosystem. In particular, they show how a cryptanalyst can recover a plaintext without knowing the secret parameters.