Beware of Vulnerable RSA generation (CVE-2017-15361)

[n05ph3r42]

https://crocs.fi.muni.cz/public/papers/rsa_ccs17
https://keychest.net/roca

[John R. Graham]

This vulnerability is in the news because of a bug in a specific Infineon smartcard chip library, specifically in the code that makes random pseudo-primes as part of RSA private key generation and specifically in their SLE78 family of chips. If you're not using anything with that chip family, there's really not much to see here. Linux software key generation, at least with the well known security libraries, to my knowledge is not affected: openssl doesn't make vulnerable keys, nor does ssh-keygen.

- John
_________________
I can confirm that I have received between 0 and 499 National Security Letters.

[n05ph3r42]

Many TPM's affected. This mostly should warn its users.