Re:Forging 1024-bit RSA signatures in nearly SNFS time [pdf]
by bflesch on Thursday September 24, 2026 @03:19PM
(#49835592)
Thank you for this nice explanation. I skimmed the abstract but didn't really understand it.
[dead]
So it's not a straightforward general-purpose RSA-1024 signature break; it's pretty situational. The paper goes into detail (in section 5) about how those situations can emerge in practical scenarios.