4 ms·There are attacks against RSA signatures when padding is omittted.by benchaney 10y agoThere are attacks against RSA signatures when padding is omittted.phicoh 10y agoObviously. But for checking the padding on a signature you only need the public key. So you cannot leak any sensitive RSA key material while checking the padding.tptacek 10y agoPadding attacks don't leak key material; they leak plaintext.benchaney 10y agoWell in this case they potentially allow forgeries, but yes.phicoh 10y agoRight an attack on an RSA signature that leaks plain text. Really? Must be a super secret signature then.tptacek 10y agoYou should familiarize yourself with how RSA works, and what an RSA signature is.