The full paper is not out yet, so there is limited information. But the official website[0] mentions: > The specific structure of the primes in question allows

The full paper is not out yet, so there is limited information. But the official website[0] mentions: > The specific structure of the primes in question allows for a fast detection of vulnerable keys, even in very large datasets. [0] https://crocs.fi.muni.cz/public/papers/rsa_ccs17 https://crocs.fi.muni.cz/public/papers/rsa_ccs17