On Thu, Feb 24, 2011 at 08:15:47AM +0100, Mounir IDRASSI wrote: > Your analysis is not true because the original poster says he has dmp1, > dmq1 and iqmp, not only p and q.
Yes, naturally if the OP has "d" (or equivalently d mod (p-1) and (q-1), which are presumed co-prime), he can recover "e" if he chooses, or just use "d" (for efficiency its projections onto Z/Z_{p-1} and Z/Z_{q-1}) to decrypt the messages. I assumed that d and e were truly unavailable, should have read the OP's message more carefully. -- Viktor. ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org