Flaw crippling millions of crypto keys is worse than first disclosed

Re:Flaw crippling millions of crypto keys is worse than firs... by jimrandomh on Tuesday November 07, 2017 @11:28AM (#15644723)

The vulnerability is CVE-2017-15361 and is described in depth in https://crocs.fi.muni.cz/_media/public/papers/nemec_roca_ccs... . An implementation of RSA by Infineon Technologies AG did key-generation incorrectly; rather than select two random large primes, it selected two large primes with a particular structure, enabling the resulting public key to be factored. This weakness is not present in other implementations of RSA, such as OpenSSL. The vulnerable key-generation code is used in the Estonian eID system, TPMs, and by Yubikey 4.

[ Parent | on HN ]

Re:Flaw crippling millions of crypto keys is worse than firs... by ACuriousSomeon on Tuesday November 07, 2017 @01:45PM (#15646236)

Thanks for the paper. It only mentions testing 1024 - 2048 bit keys. Does this also impact anything using > 2048 bit keys?

[ Parent | on HN ]

Re:Flaw crippling millions of crypto keys is worse than firs... by hdhzy on Tuesday November 07, 2017 @02:17PM (#15646546)

Yes, but it takes longer to break them. Don't wait, revoke your keys and replace hardware or generate in software. It only affects RSA though so if you used ECC you're safe.

[ Parent | on HN ]