News for hackers. Stuff that matters.
Re:OpenSSH Keys: A Walkthrough by tedunangst on Sunday January 22, 2017 @03:16PM (#13457151)
#2 is often done incorrectly even by experienced users. After a padding error, it's really hard to keep going forward long enough without returning an early error.
Re:OpenSSH Keys: A Walkthrough by phicoh on Sunday January 22, 2017 @04:11PM (#13457500)
How is this relevant in the context of setting up a connection protected by DH and RSA? Yes, it would be a problem any time you decrypt RSA. So pgp is tricky, but setting up a ssh or tls connection without DH is beyond foolish. For signature verification, there is no way that an adversary can gain anything by inserting a padding violation.

Assuming properly authenticated data, then decrypting without checking padding is no problem. For RSA encryption, padding only protects the sender. By itself RSA encryted data cannot be trusted, you need separate integrity protection for that.

Re:OpenSSH Keys: A Walkthrough by benchaney on Sunday January 22, 2017 @04:35PM (#13457659)
There are attacks against RSA signatures when padding is omittted.
Re:OpenSSH Keys: A Walkthrough by phicoh on Sunday January 22, 2017 @05:20PM (#13457954)
Obviously. But for checking the padding on a signature you only need the public key. So you cannot leak any sensitive RSA key material while checking the padding.
Re:OpenSSH Keys: A Walkthrough by tptacek on Sunday January 22, 2017 @05:51PM (#13458126)
Padding attacks don't leak key material; they leak plaintext.
Re:OpenSSH Keys: A Walkthrough by phicoh on Monday January 23, 2017 @08:11AM (#13461921)
Right an attack on an RSA signature that leaks plain text. Really? Must be a super secret signature then.
Re:OpenSSH Keys: A Walkthrough by tptacek on Monday January 23, 2017 @09:21AM (#13462282)
You should familiarize yourself with how RSA works, and what an RSA signature is.
Re:OpenSSH Keys: A Walkthrough by benchaney on Monday January 23, 2017 @01:47AM (#13460348)
Well in this case they potentially allow forgeries, but yes.