1There's a second valid decryption exponent in RSA: https://marinaibrishimova.net/docs/otherkeys.pdf 2 3can be calculated with: d2 = d+phi(n)/2 4 5Just divide the 2d+phi(n) value by 2 and use it to decrypt C. 6 7