1. Give me a pair of (message, message-signature); no oracle 2. You get two signatures from the oracle (just not "x") 3. You only get 1 signature from the oracle (just not "x") 4. RSA with 1 prime as N 5. RSA with many many ("smooth") primes as N