Imagine a lock whose secret is the product of two enormous prime numbers. Anyone can see the product. Almost no one can recover the original primes. For nearly fifty years, that picture has been the public story of RSA, the public-key scheme that still signs certificates, tokens, and software across the internet. In their paper “Forging 1024-bit RSA signatures in nearly SNFS time”, researchers Laura Shea, Miro Haller, Adam Suhl, and Nadia Heninger of the University of California San Diego and
