A New Attack Forges RSA Signatures Without Factoring, and Even 2048-Bit Keys Look Unsafe

Researchers forged a 1024-bit RSA signature with about 1,380 CPU core-years instead of factoring the key. The attack hits blind-signature RSA like Privacy Pass, not padded RSA used by most of the web.

Source: techpresso.co