[benlivengood]

The article does list several real-world attacks on:

  - Lack of padding
  - Padding oracles
  - small public exponents
  - badly chosen private exponents
  - Badly randomized large primes
  - Re-used large primes