CVE-2021-41117

CVE-2021-41117 concerns the keypair library (JS RSA key generator) generating identical P, Q (and N) values for SSH keys due to a weak RNG. The root cause is a non-cryptographically secure fallback RNG: when window.crypto.getRandomValues() is unavailable, keypair seeds an AES-CMAC counter with a ...