RSA Signatures: The Version in Most Tutorials Is Forgeable

Signing is encryption with the keys swapped, and that symmetry is exactly what makes the naive implementation breakable. Here are two forgeries executed against textbook RSA signatures, and what PSS does that hashing alone cannot.

Read the full article →

Discussion thread — share findings, corrections and follow-ups below.