ROCA-attack-on-vulnerability-CVE-2017-15361

ROCA-ataque-sobre-vulnerabilidad-CVE-2017-15361 Este repositorio contiene la tesis desarrollada para mi grado en Ingeniería Matemática en el Politécnico de Turín. Es un script basado en Python y Sage. El objetivo del script es generar una clave RSA, evaluar si es vulnerable al ataque ROCA y...

roca

ROCA检测工具 该工具与ACM CCS 2017会议论文第124号《Coppersmith攻击归来：广泛使用的RSA模数的实际分解》相关。 它使您能够测试公共RSA密钥是否存在所述的漏洞。 2017年11月4日更新 ：支持Python 2.7、3.4+。 2017年10月30日更新 ：攻击的论文已上线，ACM版本。 2017年10月30日更新 ：离散对数检测器现已在Python中实现并作为默认检测方法。它检测分解算法所利用的素数中的结构。 目前该工具支持以下密钥格式： X509证书，DER编码，每文件一个，.der，.crt X509证书，PEM编码，每文件多个，.pem...

rocacheck

rocacheck El paquete rocacheck es una implementación en Go del algoritmo de huella digital de clave que comprueba si una clave RSA fue generada por el código defectuoso de Infineon y es vulnerable a la factorización mediante el Regreso del Ataque de Coppersmith ROCA / CVE-2017-15361...

roca

Este repositorio no tiene un README...

zeek-plugin-roca

Johanna::ROCA Este plugin implementa la detección de claves CVE-2017-15361; es una reimplementación del código fuente disponible en https://github.com/crocs-muni/roca. Este plugin proporciona dos nuevas BIFs que pueden verificar claves públicas: rocavulnerablecert verifica si un certificado es...

SUSE CVE-2017-15361

The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module TPM firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various...

rocautilidades.com.br Cross Site Scripting vulnerability OBB-3107712

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Windows/x64 - Reverse TCP (192.168.201.11:4444) Shellcode (330 Bytes)

Title: Windows/x64 - Reverse TCP 192.168.201.11:4444 Shellcode 330 Bytes Author: Xenofon Vassilakopoulos Tested on: Windows/x64 - 10.0.19043 N/A Build 19043 / MIT License Copyright c 2021 Xenofon Vassilakopoulos Permission is hereby granted, free of charge, to any person obtaining a copy of this...

Fedora 33 : roca-detect (2021-acd448b558)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-acd448b558 advisory. - With the upgrade of python-cryptography in f33+, the PKCS7get0clients api was dropped. It has been replaced by a cleaner and easier api, which roca-detect...

[SECURITY] Fedora 33 Update: roca-detect-1.2.12-15.fc33

This tool is related to the ACM CCS 2017 conference paper 124 Return of the Coppersmith=EF=BF=BD=EF=BF=BD=EF=BF=BDs Attack: Practical Factorization of Widely Used RSA Moduli. https://crocs.fi.muni.cz/public/papers/rsaccs17 Install this to test public RSA keys for the presence of the vulnerability...

Fedora: Security Advisory for roca-detect (FEDORA-2021-acd448b558)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for roca-detect (FEDORA-2021-724c3aa51b)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: roca-detect-1.2.12-16.fc34

This tool is related to the ACM CCS 2017 conference paper 124 Return of the Coppersmith=EF=BF=BD=EF=BF=BD=EF=BF=BDs Attack: Practical Factorization of Widely Used RSA Moduli. https://crocs.fi.muni.cz/public/papers/rsaccs17 Install this to test public RSA keys for the presence of the vulnerability...

rocaadvocats.cat Cross Site Scripting vulnerability OBB-1332648

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

HPSBPI03583 rev. 1 - ROCA - Vulnerable RSA Generation: HP Trusted Platform Module (TPM) Accessory and Certain HP Enterprise Printer and MFP Products, Certain HP PageWide Printer and MFP Products with Standard TPM

Potential Security Impact Remote disclosure of information VULNERABILITY SUMMARY A potential security vulnerability known as “ROCA: Vulnerable RSA Generation” has been identified with the RSA keys generated by the HP Trusted Platform Module TPM Accessory and printers equipped with a TPM. This...

ROCA - Vulnerable RSA Generation: HP Trusted Platform Module (TPM) Accessory and Certain HP Enterprise Printer and MFP Products, Certain HP PageWide Printer and MFP Products with Standard TPM

A potential security vulnerability known as “ROCA: Vulnerable RSA Generation” has been identified with the RSA keys generated by the HP Trusted Platform Module TPM Accessory and printers equipped with a TPM. This vulnerability could potentially be exploited remotely to allow remote disclosure of...

How to try to predict the output of Micali-Schnorr Generator (MS-DRBG) knowing the factorization. Part II

See also Part I and Part III of this series tl;dr In the previous article of the same series we tried to predict the output of Micali-Schnorr Generator MS-DRBG knowing the factorization. In this blog post we continue the effort started in part I showing different strategies. If you want to skip a...

ROCA: Vulnerable RSA key pairs generation (CVE-2017-15361)

An old Infineon RSA library does not properly generate RSA key pairs, therefore enabling an attacker to potentially infer a private key from a public key...

Updated opensc_etc packages fix security vulnerability

A vulnerability, dubbed ROCA, was identified in an implementation of RSA key generation due to a fault in a code library developed by Infineon Technologies. The affected encryption keys are used to secure many forms of technology, such as hardware chips, authentication tokens, software packages,...

On ROCA, KRACK, BoundHook, Google Advanced Protection

Threatpost editors Mike Mimoso and Tom Spring recap this week’s infosec news starting with the ROCA vulnerabilities affecting factorization of RSA private keys, the KRACK WPA2 Wi-Fi vulnerabilities, the BoundHook attacks, and Google’s introduction of Advanced Protection for Gmail. Download: Music...