
of the root is again raised to the third power. If the 46 leftmost bytes of the result have not changed in this process, we have
found a value that can be used to forge a signature.
These 46 bytes include:

<ul>
	<li><strong>'00' '01'</strong> leading bytes (2 bytes)</li>
	<li><strong>PS</strong> padding string (8 bytes)</li>
	<li><strong>'00'</strong> trailing zero byte (1 byte)</li>
	<li><strong>HI</strong> hash identifier (15 bytes (SHA-1))</li>
	<li><strong>HD</strong> hash digest (20 bytes (SHA-1))</l