Forging a 1024-bit RSA signature through an HSM costs under 0.3% of factoring the key
UC San Diego and Inria researchers forged a 1024-bit RSA signature through an HSM in 1,380 core-years, against at least 500,000 to factor the key. The attack only works with raw, unpadded signing access, so how exposed a custodian is depends on how its HSM is configured.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+12
- Incentives
- Insufficient
- Confidence52