News for hackers. Stuff that matters.

A comment on PuTTY vulnerability vuln-p521-bias. Parent comment

Re:PuTTY vulnerability vuln-p521-bias by some_furry on Monday April 15, 2024 @05:52PM (#40046103)
Correct. Every time I've seen P-521 in a professional setting, it is the very first thing I check for.
[ Parent | on HN ]
Re:PuTTY vulnerability vuln-p521-bias by astrange on Tuesday April 16, 2024 @03:28AM (#40049253)
How often do people get it wrong? It doesn't seem particularly difficult to generate 521 random bits.
[ Parent | on HN ]
Re:PuTTY vulnerability vuln-p521-bias by some_furry on Tuesday April 16, 2024 @09:48AM (#40051810)
This is the first time it's ever actually happened. I'm just painfully aware of missing developer ergonomics and ways to shoot oneself in the foot.
[ Parent | on HN ]
Re:PuTTY vulnerability vuln-p521-bias by tptacek on Tuesday April 16, 2024 @10:08AM (#40052085)
It was found a bunch a decade or so ago. PuTTY is just a more obscure codebase.
[ Parent | on HN ]
Re:PuTTY vulnerability vuln-p521-bias by some_furry on Tuesday April 16, 2024 @12:10PM (#40053806)
Sorry, I should've been clearer: all the times I've checked for this specific bug, I did not find it in the code I was looking at. All the times I looked for it was the series of events I was reflecting on.

That's what I meant by "the first time it's happened". I shouldn't write comments before my first cup of coffee.

[ Parent | on HN ]