News for hackers. Stuff that matters.
Re:Forging 1024-bit RSA signatures in nearly SNFS time [pdf] by tptacek on Thursday September 24, 2026 @02:56PM (#49835293)
The most important thing to know about this work, which is awesome, is that it relies on access to a raw RSA oracle, where you have a public key and an API that allows you to directly do RSA operations with the corresponding key. The idea is that you then lose access to the oracle, and thus to the private key, but you've gained enough information from your session with the oracle to make forgeries in the future.

So it's not a straightforward general-purpose RSA-1024 signature break; it's pretty situational. The paper goes into detail (in section 5) about how those situations can emerge in practical scenarios.

Re:Forging 1024-bit RSA signatures in nearly SNFS time [pdf] by bflesch on Thursday September 24, 2026 @03:19PM (#49835592)
Thank you for this nice explanation. I skimmed the abstract but didn't really understand it.
[dead]
Re:Forging 1024-bit RSA signatures in nearly SNFS time [pdf] by tptacek on Thursday September 24, 2026 @04:32PM (#49836398)
I'm pretty sure you just described an IACR paper --- with Nadia Heninger's name on it --- as "clickbait"?
Re:Forging 1024-bit RSA signatures in nearly SNFS time [pdf] by deprave on Thursday September 24, 2026 @09:35PM (#49839203)
It’s important to note that by “raw” they mean without padding, which is more rare than just a signing oracle, see section 7 of the paper.