GoKawiilResearchers forge RSA signatures without factoring the underlying key
Cryptography researchers demonstrated a method to forge certain RSA signatures without recovering the private key, using a variant of the special number field sieve algorithm combined with an oracle found in some blind-signature protocols. The attack is practical against deprecated 1,024-bit keys and reduces the estimated security margin of 2,048-bit and 4,096-bit keys in vulnerable blind-signature systems, while standard RSA implementations using PKCS or PSS padding appear unaffected.