Hacker News

Top stories

Live mirror
30 storiesupdated just nowView source snapshot
  1. F-Droid 2.0(f-droid.org)
    156comments
  2. Show HN: Make cursed fonts like Times New Bastard(mitpit.com)
    20comments
  3. Rails World 2026 Opening Keynote [video](youtube.com)
    61comments
  4. Show HN: Whiteboard (YC W26) – An open-source IDE for thoughtful software design(github.com/devdotfast)
    23comments
  5. Creatine uptake enhances antitumor immunity(cell.com)
    58comments
  6. Fearless SIMD v1.0(linebender.org)
    12comments
  7. Stable (YC W20) Is Hiring Product Engineers(usestable.com)
    —discuss
  8. Forging 1024-bit RSA signatures in nearly SNFS time [pdf](iacr.org)
    1comments
  9. The forgotten battle of East Lansing(eastlansinginfo.news)
    —discuss
  10. Book review: Is parallel programming hard, and, if so, what can you do about it?(ahelwer.ca)
    1comments
  11. Why is the liver so weirdly regenerative?(dynomight.substack.com)
    46comments
  12. Security auditing in the age of (good enough) AI(trailofbits.com)
    1comments
  13. Two-tier encryption in the UK(macanorak.com)
    305comments
  14. Geothermal heat map of US hot springs(soakingsprings.com)
    10comments
  15. My Weird New Hobby: Wandering Around Tokyo on Google Maps(ahmedhossamdev.com)
    15comments
  16. WaveDigger: Dig into wireless signals to discover their physical locations(github.com/christianrowlands)
    8comments
  17. Nokia Design Archive (2025)(aalto.fi)
    98comments
  18. Motor Characterization for Small Running Robots (2016)(robot-daycare.com)
    —discuss
  19. Show HN: Air-gapped file encryption as self-decrypting HTML page(apeleg.com)
    6comments
  20. Lambda MicroEgg(philipzucker.com)
    5comments
  21. Show HN: AgentRun: DSL to turn agents into workflows(github.com/parcha-ai)
    1comments
  22. Show HN: Treepeat – Code similarity detection using Tree-sitter(github.com/dsummersl)
    —discuss
  23. GitHub has not removed malicious imitation software after 3 weeks(successfulsoftware.net)
    77comments
  24. B5-BJ2 – Ice Cream Barges – Concrete Ship Constructors (2023)(thecretefleet.com)
    6comments
  25. Experiencing writing at our recent Chinese calligraphy workshop(viewsproject.wordpress.com)
    1comments
  26. Ideas on modernizing the open-source desktop(lwn.net)
    442comments
  27. Is A.I. Above the Law?(newyorker.com)
    19comments
  28. Search – A small, fast WebKit browser for macOS(github.com/driceroland)
    9comments
  29. Toyota is taking the Corolla electric(electrek.co)
    121comments
  30. The science of Monkey Island: can grog dissolve a metal mug that fast?(jgeekstudies.org)
    26comments

Forging 1024-bit RSA signatures in nearly SNFS time [pdf]

22 pointsby 4h agoeprint.iacr.org
1 comments
18m agoHN ↗

The most important thing to know about this work, which is awesome, is that it relies on access to a raw RSA oracle, where you have a public key and an API that allows you to directly do RSA operations with the corresponding key. The idea is that you then lose access to the oracle, and thus to the private key, but you've gained enough information from your session with the oracle to make forgeries in the future.

So it's not a straightforward general-purpose RSA-1024 signature break; it's pretty situational. The paper goes into detail (in section 5) about how those situations can emerge in practical scenarios.