A security flaw in Infineon smart cards and TPMs allows an attacker to recover private keys from the public keys. Basically, the key generation algorithm sometimes creates public keys that are vulnerable to Coppersmith’s attack. Read More
Late in 2015, we wrote about a survey by a European security consultancy called SEC Consult that looked at the cryptographic safety of the average web server. The results were worrying: 3,200,000 publicly-visible web servers were using private keys that weren’t actually private. In fact, they were already publicly known, and detectably so. Read More
CloudFlare’s analysis Friday that Heartbleed may not be able to recover private keys turns out to be wrong. Two candidates recovered the keys from their challenge server.
Latest Comments