fault attack on RSA signature (not RSA-CRT)

Original writeup (http://mslc.ctf.su/wp/plaidctf-2016-radioactive-crypto-275/).