Forging 1024-bit RSA signatures in nearly SNFS time [pdf] (eprint.iacr.org)

<a href="https://news.ycombinator.com/item?id=49831098">Comments</a>