Blind RSA apps like Privacy Pass face real-world threat model from scaled oracle queries

matthew_d_green · x · 2026-09-22

A cryptographic discussion of Blind RSA applications such as Privacy Pass: the threat model matches the attack setting because an attacker would need to solve a prohibitively large number of CAPTCHAs, yet the scale of these apps means their request volumes are comparable to oracle queries against a single key.

Original post →

More from Safety

Safety channel →