TLDR InfoSec · ATTACKS & VULNERABILITIES
CRYPTOGRAPHIC KEYS PROTECTING SSH CONNECTIONS STOLEN IN NEW ATTACK
Summary from the TLDR InfoSec newsletter
The private key material of cryptographic keys can be leaked due to naturally occurring errors in SSH connections. Researchers were able to reconstruct private key material using lattice-based cryptography by comparing faulty signatures generated as part of the connection setup with successful signatures. The attack only affects RSA keys and can be mitigated by error correction in many common implementations of SSH.