The Secure Generation of RSA Moduli Using Poor RNG

Abstract

We discuss a procedure, which should be called Lenstra's fix, for producing secure RSA moduli even when the random number generation is very poor.