keypair

keypair 순수 JS로 RSA PEM 키 쌍 생성 사용법 var keypair = require'keypair'; var pair = keypair; console.logpair; 출력 $ node example.js public: '-----BEGIN RSA PUBLIC...

Detect-CVE-2017-15361-TPM

CVE-2017-15361 の脆弱性があるトラステッド プラットフォーム モジュールを検出する このリポジトリは、DoD管理者が有効なトラステッド プラットフォーム モジュール TPM のうち CVE-2017-15361 の脆弱性があるシステムを検出するのを支援するためのコンテンツを提供し、情報保証勧告 RSA Key Generation Vulnerability Affecting Trusted Platform Modules の補足資料です。このリポジトリのファイルは、こちらから zip ファイルとしてダウンロードできます here。...

ROCA-attack-on-vulnerability-CVE-2017-15361

ROCA-attack-on-vulnerability-CVE-2017-15361 이 저장소는 토리노 공과대학교Polytechnic of Turin에서 수학 공학 학사 학위를 위해 작성한 논문을 포함합니다. Python과 Sage 기반의 스크립트입니다. 이 스크립트의 목표는 RSA 키를 생성하고, ROCA 공격에 취약한지 평가하며, ROCA 공격을 수행하는 것입니다. 스크립트의 주석은 이탈리아어로 작성되어 있습니다. 폴더 구조 . └── Attacco-ROCA-sulla-vulnerabilita-CVE-2017-15361 The...

Astra Linux – Vulnerability in nss

During RSA key generation, bignum implementations used a variant of the Binary Extended Euclidean Algorithm, which involved significant input-dependent processes. This allowed attackers to perform electromagnetic-based side-channel attacks to capture traces that could lead to the recovery of secr...

PYSEC-2026-748 SaltStack RSA Key Generation allows remote users to decrypt communications

SaltStack RSA Key Generation allows remote users to decrypt communications...

MiracleLinux 4 : ntp-4.2.6p5-5.0.1.AXS4 (AXSA:2015-327:04)

The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2015-327:04 advisory. The Network Time Protocol NTP is used to synchronize a computer's time with another reference time source. This package includes ntpd a daemon which...

CVE-2021-41117

keypair is a a RSA PEM key generator written in javascript. keypair implements a lot of cryptographic primitives on its own or by borrowing from other libraries where possible, including node-forge. An issue was discovered where this library was generating identical RSA keys used in SSH. This wou...

JLSEC-2025-232 Side channel in RSA key generation and operations (SSBleed, M-Step)

Vulnerability Mbed TLS's modular inversion routine and GCD routine are vulnerable to local timing attacks in a number of settings discussed below. These functions are used in RSA, making the following operations vulnerable in all configurations: - RSA key generation with any API mbedtlsrsagenkey...

EUVD-2000-1236

Malware in sbrugna...

EUVD-1999-1425

Malware in sbrugna...

EUVD-2020-5407

Malware in sbrugna...

EUVD-2020-4714

Malware in sbrugna...

EUVD-2021-2147

Malware in sbrugna...

EUVD-2022-37695

Malicious code in bioql PyPI...

EUVD-2022-3990

Malicious code in bioql PyPI...

EUVD-2022-43603

Malicious code in bioql PyPI...

CVE-2022-40306

The login form /Login in ECi Printanista Hub formerly FMAudit Printscout before 5.5.2 July 2023 performs expensive RSA key-generation operations, which allows attackers to cause a denial of service DoS by requesting that form repeatedly...

CVE-2022-34746

An insufficient entropy vulnerability caused by the improper use of randomness sources with low entropy for RSA key pair generation was found in Zyxel GS1900 series firmware versions prior to V2.70. This vulnerability could allow an unauthenticated attacker to retrieve a private key by factoring...

CVE-2013-2228

SaltStack RSA Key Generation allows remote users to decrypt communications...

CVE-2018-9426

In RsaKeyPairGenerator::getNumberOfIterations of RSAKeyPairGenerator.java, an incorrect implementation could cause weak RSA key pairs being generated. This could lead to crypto vulnerability with no additional execution privileges needed. User interaction is not needed for exploitation. Bulletin...