Eon's ago I found the same bug in a security library that we were using. A signature was fully verified, except to verify that it corresponded to the text being

Eon's ago I found the same bug in a security library that we were using. A signature was fully verified, except to verify that it corresponded to the text being signed. You could copy any old signature, cut and paste it under a new text and the library would happily accept it.