Low-exponent RSA ⇒ RSA

Fully-black-box reduction · standard model · folklore · security loss: none

Statement

Hardness of low-exponent RSA for an exponent $e$ is hardness of RSA for one generator $\mathsf{GrGen}$, the one with fixed public exponent $e$, with the same advantage — folklore.