Matthew Green clarifies: 2007 Joux-Naccache-Thoma attack, not RSA-1024 factorization

matthew_d_green · x · 2026-09-22

Responding to the viral result on forging RSA signatures in nearly SNFS time, cryptographer Matthew Green clarified that this is not RSA-1024 factorization. It is an implementation of a 2007 attack by Joux, Naccache and Thoma: an attacker must query an RSA-1024 oracle many times and perform heavy computation before gaining ongoing signature forgery capability.

Related event: Researchers Implement 2007 RSA-1024 Signature Forgery Attack(3 posts)→

Original post →

More from Safety

Safety channel →