# Knowing you can combine 2 signatures, Is it possible to remove part of the signature?

Since my last post I've been more interested into RSA cryptography, but I'm questioning one thing.

Lets say we are using standard textbook RSA with no padding and with the standard signature generation in lets say the Microsoft crypto API and you got the part you want to remove by itself is it possible to remove that from another signature with the same thing on the beginning or end?

• Can you be more specific? – Squeamish Ossifrage Dec 5 '17 at 16:06
• @SqueamishOssifrage Lets say you have m1 which is a separate signature from m2 but m2 contains the message of m1 with some more stuff before-hand, as you know you can combine two signatures because of the multiplicative property. but lets say you have m1 at the end of m2 is it possible to remove that same message of m1 at the end of m2? – Raspberry Pi Dec 5 '17 at 16:26

So, let's say you have a message $m$ which is equal to $a\cdot b$, for $a,b$ two values you know. If you can get the signer to sign both $a$ and $b$, you can compute the value of the signature of $m$, thanks to that malleability: $$m^d = (a\cdot b)^d = a^db^d \mod N$$