Forging 1024-bit RSA signatures in nearly SNFS time [pdf]

https://arstechnica.com/security/2026/09/theres-a-new-way-to...