3 ms·
Isn't the software that generated the key derivable from the key itself? Even if it doesn't tag the key explicitly, there's probably a fingerprint in the defaul
by gcp 15y ago
Isn't the software that generated the key derivable from the key itself? Even if it doesn't tag the key explicitly, there's probably a fingerprint in the default allowed algorithms etc.
If it's a fixed vulnerability, the keys would belong to a certain date range etc.
Will be interesting to see what turns up.
- willvarfar 15y agohttp://williamedwardscoder.tumblr.com/post/17652334223/omg-cracking-some-rsa-keys-the-easy-way http://williamedwardscoder.tumblr.com/post/17652334223/omg-c... was my thought too
- tonfa 15y agoThis paper points to OpenSSL with low entropy RNG being the culprit: https://freedom-to-tinker.com/blog/nadiah/new-research-theres-no-need-panic-over-factorable-keys-just-mind-your-ps-and-qs https://freedom-to-tinker.com/blog/nadiah/new-research-there...