petrs

3 ms·

1. 1.▲
   All GitHub JavaCard projects analyzed – state of open-source ecosystem(medium.com)

   3 points by petrs 9y ago|0 comments
2. 2.▲
   by petrs 10y ago

   You may also try online tool that classifies keys based on the results from paper: http://crcs.cz/rsapp/ Just insert encoded certificate or URL to https server and let tool to tell you what library generated that key(s
3. 3.▲
   by petrs 10y ago

   Yes, this is an incorrect statement, sorry. It sneaked there after edits by proofreading service, but that is no excuse for us. Should be just NP. (I'm one of the authors of the paper)
4. 4.▲
   by petrs 10y ago

   Verification that TLS keys are mostly generated by OpenSSL and PGP keys by PGP/GPG are sanity check that method actually works. If it will turn out, that particular library has vulnerability, one can quickly search for other vulnerable