{
  "abstract": "We revisit DM-RSA, an RSA variant that uses two independent moduli, whose original version was broken by Håstad's attack and contained an incorrect compromise-tolerance claim. We give a formal treatment of its repaired variant, DM-RSA-OAEP: (i) a complete IND-CCA2 security proof in the random-oracle model via a two-step hybrid argument, upper-bounding the security of the scheme by that of the weaker underlying RSA-OAEP instance, with an explicit simulation loss; (ii) a fault-detection theorem in an explicit adversary model that covers computation, key, and verification faults, including safe-error attacks, under a clearly stated physical-diversity assumption; (iii) an explicit analysis of why the countermeasure degrades to uselessness when the diversity assumption is violated (common-mode faults on a single chip). We position the scheme against the countermeasure landscape and against the broken dual-modulus literature. The contribution is deliberately framed as a fault countermeasure with a provable detection guarantee, not as a computationally stronger RSA. We conclude with a concrete instantiation and a detailed measurement protocol.",
  "abstract_shown": true,
  "affiliations": [],
  "article_type": null,
  "arxiv": "2610.26642",
  "author_total": 2,
  "authors": [
    {
      "name": "Ramamonjy Andriamifidisoa"
    },
    {
      "name": "Rufine Marius Lalasoa"
    }
  ],
  "bibtex": "https://research.draconitic.com/paper/26t500ap90jdr.bib",
  "cited_by": 0,
  "doi": "10.48550/arxiv.2610.26642",
  "fulltext_url": null,
  "id": "26t500ap90jdr",
  "issns": [],
  "landing_url": "https://arxiv.org/abs/2610.26642",
  "language": null,
  "licence": "CC-BY-4.0",
  "licence_label": "CC BY 4.0",
  "licence_source": "article",
  "licence_url": "http://creativecommons.org/licenses/by/4.0/",
  "metadata_licence": "CC0-1.0",
  "native_subjects": [
    [
      "arxiv",
      "cs.CR"
    ],
    [
      "arxiv",
      "cs.IT"
    ],
    [
      "arxiv",
      "math.IT"
    ],
    [
      "openalex",
      "1702|Cryptography and Data Security"
    ]
  ],
  "openalex": "W7223032055",
  "pdf_url": "https://arxiv.org/pdf/2610.26642",
  "pmcid": null,
  "pmid": null,
  "published": "2026-10-19",
  "publisher": null,
  "ris": "https://research.draconitic.com/paper/26t500ap90jdr.ris",
  "sources": [
    {
      "first_seen": "2026-10-30T12:30:57Z",
      "native_id": "2610.26642",
      "source": "arxiv",
      "url": "https://arxiv.org/abs/2610.26642"
    }
  ],
  "subjects": [
    {
      "field": "mathematics",
      "origin": "arxiv:math.IT",
      "subfield": "general"
    }
  ],
  "title": "DM-RSA-OAEP: Formal Treatment of a Dual-Modulus Fault-Detection Countermeasure Based on Physical Diversity",
  "title_text": "DM-RSA-OAEP: Formal Treatment of a Dual-Modulus Fault-Detection Countermeasure Based on Physical Diversity",
  "type": "preprint",
  "updated_at": "2026-10-30T12:33:44Z",
  "url": "https://research.draconitic.com/paper/26t500ap90jdr",
  "venue": "arXiv",
  "versions": []
}