Nice writeup, and the point (RSA is very simple, until you actually to need it securely!) is conveyed well. One thing of note: BB98 essentially springs eternal

Nice writeup, and the point (RSA is very simple, until you actually to need it securely!) is conveyed well. One thing of note: BB98 essentially springs eternal; a new way to find the single bit of oracle state needed for it is discovered every few years. See ROBOT[1] (2018) and this year's Marvin[2]. [1]: https://robotattack.org/ https://robotattack.org/ [2]: https://people.redhat.com/~hkario/marvin/ https://people.redhat.com/~hkario/marvin/