On the Dangers of RSA Exponent Transforms. - Eugene Lau; Laura Shea; Nadia Heninger (PKC (1), 2026)