by Verena Brunner, Bernhard Esslinger, published on 2011-08-15
You found out that a message encrypted with two different public keys but same modulus yield to the same ciphertexts. Are you able to name the smallest private key to decrypt ciphertexts that were generated with this parameters?