Factoring
Summary: Trail of Bits and the badkeys project found hundreds of unique RSA keys in the wild whose bits are heavily biased toward 0, and many can be quickly factored by converting the integer to a polynomial and factoring that instead. They traced one pattern to a type mismatch in big-integer code in CompleteFTP versions 10.0.0-12.0.0 for RSA and 10.0.0-23.0.4 for DSA, recovering 603 unique RSA private keys and 74 DSA keys from internet scans.
Bottom line: The affected keys were generated between December 2016 and December 2023, and the proportion of vulnerable keys has plateaued because customers update software but generate host keys only once - so a key made years ago can still be exposed today.
Read the original at Trail of Bits Blog ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026