Tag
A team implemented 1024-bit RSA signature forgery in nearly SNFS time, showing that temporary HSM access allows attackers to forge arbitrary signatures without factoring the key.