---
# System prepended metadata

title: 'Section: CryptoBaby RSA'

---

# Section: Crypto - Baby RSA

Category: Crypto
Difficulty: Medium
Author: floesen
First Blood: thehackerscrew

Show all solves (2)
I stumbled across this weird RSA implementation. However, it seems like it still works correctly. Can you figure out how?

Challenge Files: babyrsa.zip

## Problemstellung

![](https://hackmd.io/_uploads/BkBRqO5hh.jpg)

e := scalar (exponent to encrypt message)
N := scalar (RSA Module eg. mod(N))
v := vector in R³²
A := matrix in R³²x³³
l := list of intigers with 819 entrys
a := scalar
b := scalar
m1 := scalar
m2 := scalar
h := scalar

The rsa_decrypt function provides an alternative way to decrypt rsa encrypt messages wich takes the last eight variales as key.

flag is **probably** the default private key used in rsa