Privacy Pass

RSA Forgery Without Factoring Still Needs a Raw Signing Oracle

Researchers forged RSA-1024 signatures without factoring, but the attack still requires access to a raw RSA oracle.