Maths WorkshopMaths problems with full solutions
Exercise 1586Number theory › CongruencesL1Added 3 Nov 2026

RSA and modular arithmetic

#RSA#cryptography#modular exponentiation

Statement

In RSA, n=pqn=pq with p,qp,q primes, gcd⁡(e,φ(n))=1\gcd(e,\varphi(n))=1, and d≡e−1(modφ(n))d\equiv e^{-1}\pmod{\varphi(n)}. Show that med≡m(modn)m^{ed}\equiv m\pmod n for all mm.

Hint

Use Euler's theorem and CRT.

Show solutionHide solution

Solution

Coprime case. If gcd⁡(m,n)=1\gcd(m,n)=1: by Euler, mφ(n)≡1(modn)m^{\varphi(n)}\equiv1\pmod n. Since ed≡1(modφ(n))ed\equiv1\pmod{\varphi(n)}, ed=1+kφ(n)ed=1+k\varphi(n), so med=m⋅(mφ(n))k≡m(modn)m^{ed}=m\cdot(m^{\varphi(n)})^k\equiv m\pmod n.

Non-coprime case. If gcd⁡(m,n)>1\gcd(m,n)>1, then WLOG p∣mp\mid m. Then med≡0(modp)m^{ed}\equiv0\pmod p and med≡m(modq)m^{ed}\equiv m\pmod q (by Euler mod qq). By CRT, med≡m(modn)m^{ed}\equiv m\pmod n (and m≡0(modp)m\equiv0\pmod p ensures med≡m(modp)m^{ed}\equiv m\pmod p too).

Conclusion. RSA correctness holds for all mm.