I cite from Fundamentals of Computer Security (Chapter 7 on Digital Signature, Paragraph 7.3 on RSA Signatures, page 289):
Multiple uses of the RSA Signature scheme tend to weaken it. The way out is to make subsequent signatures dependent on those previously generated.
- Why is this?
- Does it affect also the RSA Encryption scheme, or is it a weakness that comes from the knowledge of the message (and therefore affects only Signature schemes)?