Rating:
tldr;- send t = h1/h2 and receive (r, s) from the server- (r, t^-1 s) is a valid signature for the message h2
[writeup](https://jsur.in/posts/2021-07-19-google-ctf-2021-crypto-writeups#tonality)
I don't remember
