TLDR Tech / News
New Attack Weakens RSA Security Without Factoring
Researchers have developed a new attack method against RSA that makes it possible to forge digital signatures without factoring the RSA modulus or recovering the private key. By utilizing a variant of the Number Field Sieve algorithm and temporary access to a raw RSA oracle, an attacker can perform precomputation and forge arbitrary RSA signatures offline. While practically feasible for 1024-bit keys and reducing the security of 2048- and 4096-bit keys, the attack currently remains limited against common padding schemes like PKCS#1 v1.5 or RSA-PSS.
Read the full story