3 ms·
The vulnerability is CVE-2017-15361 and is described in depth in https://crocs.fi.muni.cz/_media/public/papers/nemec_roca_ccs17_preprint.pdf https://crocs.fi.mu
by jimrandomh 9y ago
The vulnerability is CVE-2017-15361 and is described in depth in https://crocs.fi.muni.cz/_media/public/papers/nemec_roca_ccs17_preprint.pdf https://crocs.fi.muni.cz/_media/public/papers/nemec_roca_ccs... . An implementation of RSA by Infineon Technologies AG did key-generation incorrectly; rather than select two random large primes, it selected two large primes with a particular structure, enabling the resulting public key to be factored. This weakness is not present in other implementations of RSA, such as OpenSSL. The vulnerable key-generation code is used in the Estonian eID system, TPMs, and by Yubikey 4.
- ACuriousSomeon 9y agoThanks for the paper. It only mentions testing 1024 - 2048 bit keys. Does this also impact anything using > 2048 bit keys?
- hdhzy 9y agoYes, but it takes longer to break them. Don't wait, revoke your keys and replace hardware or generate in software. It only affects RSA though so if you used ECC you're safe.