as with rsa the security of the system is related to the difficulty of factoring very large numbers. but, in contrast to rsa, gmr is secure against "adaptive chosen-message attacks" — even when an attacker receives signatures for messages of his choice, this does not allow him to forge a signature for a single additional message.