RSA 'weak link' in PGP?