The paper in question[1]. This will make some practical attacks faster, e.g. the recent attack on some SSH & IKE implementations[2] which misused RSA-PKCS#1v1.

The paper in question[1]. This will make some practical attacks faster, e.g. the recent attack on some SSH & IKE implementations[2] which misused RSA-PKCS#1v1.5. [1] https://eprint.iacr.org/2023/237 https://eprint.iacr.org/2023/237 [2] https://eprint.iacr.org/2023/1711 https://eprint.iacr.org/2023/1711