News for hackers. Stuff that matters.

A comment on Passive SSH Key Compromise via Lattices [pdf]. Parent comment

Re:Passive SSH Key Compromise via Lattices [pdf] by oxxoxoxooo on Monday November 06, 2023 @01:08PM (#38166259)
> Implementations of big number math can and does contain bugs. (I used to hunt for those via fuzzing, which turned up an amazing number of them.)

I'm curious, can you give some examples what kind of bugs did you discover?

[ Parent | on HN ]
Re:Passive SSH Key Compromise via Lattices [pdf] by hannob on Monday November 06, 2023 @01:13PM (#38166342)
CVE-2015-3193 in OpenSSL, CVE-2016-1938 in NSS. There were more, it's been a while.

Ultimately: things like a^b or a/b would return wrong results for certain inputs.

[ Parent | on HN ]
Re:Passive SSH Key Compromise via Lattices [pdf] by oxxoxoxooo on Monday November 06, 2023 @01:26PM (#38166574)
Thanks!
[ Parent | on HN ]