News for hackers. Stuff that matters.
Re:PuTTY vulnerability vuln-p521-bias by darby_eight on Monday April 15, 2024 @08:51PM (#40047287)
Tf is a zero bit and how is it distinct from a zero bit?
Re:PuTTY vulnerability vuln-p521-bias by Retr0id on Monday April 15, 2024 @09:00PM (#40047343)
I'm not quite sure what you're asking here but note that 521 != 512, and the former is not a typo.
Re:PuTTY vulnerability vuln-p521-bias by cozzyd on Tuesday April 16, 2024 @01:18AM (#40048607)
Plot twist: The choice of 521 is adversarial specifically to exploit PuTTY without being easily noticed. (Ok I get that 2^521-1 is a mersenne prime).
Re:PuTTY vulnerability vuln-p521-bias by asddubs on Tuesday April 16, 2024 @04:48AM (#40049721)
maybe 2^521-1 being a mersenne prime is adversarial
Re:PuTTY vulnerability vuln-p521-bias by tankenmate on Tuesday April 16, 2024 @05:08AM (#40049863)
only in base 10 :)
Re:PuTTY vulnerability vuln-p521-bias by asddubs on Tuesday April 16, 2024 @09:41AM (#40051732)
I considered making that joke, that the established common base was picked adversarially to have 521 and 512 be confusingly similar but couldn't find a non convoluted way of expressing that without implying primes change with base
Re:PuTTY vulnerability vuln-p521-bias by gpvos on Tuesday April 16, 2024 @02:50AM (#40049039)
A zero bit is not a cryptographically random bit.
Re:PuTTY vulnerability vuln-p521-bias by dspillett on Tuesday April 16, 2024 @05:28AM (#40049988)
Here it is the difference between a bit that is part of a cryptographically-safe random number and just happens to be zero, but had equal chance of being one, and a bit that is zero every time because of the way the numbers are being generated.