Until now, cryptographers thought factoring was the only way to break RSA. Not anymore.