> As a working nerd who also deals with other uses of the RSA algorithm, it > would be nice to know which seasonings counteract this new poison and the > old results that it builds upon. Basically, "don't use raw RSA". Using any sane kind of signature padding scheme, like PKCS#1-1.5 or RSA-PSS, foils the attack.