Re: broken RSA keys

[Alexander Cherepanov <ch3root () openwall com>]

On 05/04/2016 03:42 PM, Solar Designer wrote:
> 0x115CFF61CFECFF61BE9, where we see three 32-bit limbs satisfying:
>
> limb[1] = limb[0] + limb[2]

This just means that the number came from two-limb number with limbs 
limb_src[1] = limb[1] - limb[0] and limb_src[0] = limb[0] by multiplying 
it by 2**32 + 1. HTH.

--
Alexander Cherepanov