And then you find out about special soundness and that this is not only expected...

nmadden 9 months ago | parent | context | favorite | on: PuTTY vulnerability vuln-p521-bias

And then you find out about special soundness and that this is not only expected behaviour, but crucial to the security definitions and you realise that signatures are absolutely cursed.