Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.
  • solrize@lemmy.mlEnglish
    43·
    1 month ago

    This is interesting but it’s essentially a protocol attack against a certain type of RSA signature. It talks about PKCS5 not being affected. Says nothing about OAEP which I’d hope also holds up.