Why does my SSH private key still work after changing some bytes? (2016)

Re:Why does my SSH private key still work after changing som... by layer8 on Saturday December 31, 2022 @02:01PM (#34199564)

This is incorrect. The properties of DER you cite do not prevent changing parts of an RSAPrivateKey structure (i.e. replacing o by an arbitrary o' is perfectly possible). The properties only prevent two different DER structures from representing the same value.

It is possible to have an RSAPrivateKey structure where the privateExponent field is inconsistent with the exponent1/exponent2 fields, effectively representing two different private keys, and where one library uses the one and another uses the other. However, that just means that only one of the two would work with the given public key.

That can be exploited only insofar as it will break interoperability depending on which library is used. In addition, an attacker would need access to the private key in order to create the inconsistent values, or would need to install a key creation software producing such inconsistent values, in which case the attacker probably can already do much worse.

[ Parent | on HN ]

Re:Why does my SSH private key still work after changing som... by jesprenj on Saturday December 31, 2022 @09:07PM (#34202851)

Actually my question was poorly stated. I meant to ask what the parent comment understood, but the grandparent comment understood my question in a different way - on the ASN.1 level and not on the crypto level, like issues with different parsings of same weird XML documents.

[ Parent | on HN ]