TLDR InfoSec · ATTACKS & VULNERABILITIES

CRYPTOGRAPHIC KEYS PROTECTING SSH CONNECTIONS STOLEN IN NEW ATTACK

arstechnica.com4 min read

Summary from the TLDR InfoSec newsletter

The private key material of cryptographic keys can be leaked due to naturally occurring errors in SSH connections. Researchers were able to reconstruct private key material using lattice-based cryptography by comparing faulty signatures generated as part of the connection setup with successful signatures. The attack only affects RSA keys and can be mitigated by error correction in many common implementations of SSH.