Re:PuTTY vulnerability vuln-p521-bias
by hobbified on Tuesday April 16, 2024 @10:36AM
(#40052508)
In a parallel universe, they switched to RFC6979 in 2013, but the implementation had a bug that wasn't detected for years, allowing compromise of lots of keys. In that parallel universe, HN is criticizing them for following fashion instead of just leaving an already-proven piece of crypto code in place.
It's an unfortunate bug, an unfortunate oversight, but I think they made a perfectly reasonable choice at the time.
It's an unfortunate bug, an unfortunate oversight, but I think they made a perfectly reasonable choice at the time.