As a working nerd who also deals with other uses of the RSA algorithm, it would be nice to know which seasonings counteract this new poison and the old results that it builds upon.
Basically, "don't use raw RSA". Using any sane kind of signature padding scheme, like PKCS#1-1.5 or RSA-PSS, foils the attack.
_______________________________________________ Gnupg-users mailing list [email protected] https://lists.gnupg.org/mailman/listinfo/gnupg-users
