Small private Exponent d / Wiener's Attack

The private key exponent d of an RSA key is usually a large value, while the public exponent e can be set to a small value (default: e=65537).

Keys where the private exponent d is small compared to the key length can be broken with Wiener's Attack. A special case of such vulnerable keys is when the public and private exponent are confused (e.g., d=65537).

• Cryptanalysis of Short RSA Secret Exponents (Michael J. Wiener, 1989)
• oWiener - Python implementation of the Wiener attack (this code has been used to implement the check in badkeys)