NECA - Not Even Coppersmith’s Attack

This is a fast implementation of an attack by Rivest and Shamir adapted to work on 512-bit RSA keys affected by the ROCA vulnerability. I wrote a blog post describing the attack. The source code is available on GitHub.