An attacker could generate a forged signature on the assumption when the factorization problem is solved.

• 一旦因子分解问题可解，攻击者就可以伪造签名。