Jump to content

Researchers Detail Flaw in Online Cryptography


V.T. Eric Layton

Recommended Posts

V.T. Eric Layton

A team of Internet security researchers says a small number of public encryption keys offer "no security at all"

By Evan Applegate

 

from Business Week:

 

First, the bad news: A small number of active RSA public encryption keys, a popular type of encryption protocol that secures billions of online transactions, offer “no security at all.”

 

read more --> http://www.businessweek.com/technology/res...c-02162012.html

Link to comment
Share on other sites

http://twit.tv/show/security-now/340

 

Leo and Steve Gibson discuss this in their latest episode of Security Now. This is certainly an issue that needs to be fixed, but is certainly not something that is really deployable as a threat today. Essentially this works only if you have a public key and a private kay that have one of their factors that is the same. In short, this is a highly limited number, and the attacker would have to know who you are, what system you are connecting to, and that systems key.

 

Not really practical to deploy at this point.

 

Adam

Link to comment
Share on other sites

securitybreach
http://twit.tv/show/security-now/340

 

Leo and Steve Gibson discuss this in their latest episode of Security Now. This is certainly an issue that needs to be fixed, but is certainly not something that is really deployable as a threat today. Essentially this works only if you have a public key and a private kay that have one of their factors that is the same. In short, this is a highly limited number, and the attacker would have to know who you are, what system you are connecting to, and that systems key.

 

Not really practical to deploy at this point.

 

Adam

Thanks :thumbsup:

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...