PuTTY vulnerability vuln-p521-bias

Re:PuTTY vulnerability vuln-p521-bias by cchance on Monday April 15, 2024 @11:37PM (#40048129)

I mean the write up indicates you'd need access to the server side, or the pageant with the private key loaded, which both seem to be like... umm... at that point don't we have bigger issues?

[ Parent | on HN ]

Re:PuTTY vulnerability vuln-p521-bias by Khoth on Tuesday April 16, 2024 @01:04AM (#40048529)

Not sure about the pageant part, but it's a major problem when connecting to a compromised server leaks the client's private key.

(For example, if an attacker has compromised server A and you connect to it, they can now use your key to connect to server B which you also use)

[ Parent | on HN ]

Re:PuTTY vulnerability vuln-p521-bias by leni536 on Tuesday April 16, 2024 @03:10AM (#40049143)

Now I feel better for never using the same key for different servers.

[ Parent | on HN ]