LINUX.IE, website of the Irish Linux Users' Group
Tux rules!

   
Home
New Users
Articles
Download
Projects
Community
Vendors

  Print Version
Email to...
 
Archives:


planetILUG

Recent News

News Archive


Join the
ILUG
on FaceBook


Join the
ILUG
on LinkedIn


Join the
ILUG SETI
Group



















 
 :: Mailing Lists

[ILUG] serious openssl/openssh hole found

[ILUG] serious openssl/openssh hole found

Josh Glover jmglov at gmail.com
Wed May 14 12:21:26 IST 2008


2008/5/14 Justin Mason <jm at jmason.org>:
>
> if there are only 256k private keys, and each priv key has a corresponding
> public key, then you can precompute all those priv/pub key pairs and map
> the public key to the private key.  That's what is possible right now.

True enough. I was coming at it from a mathematical angle; the private
key / public key generation is a one-way operation, so you cannot
reverse it.

But just like other one-way operations, you can brute-force it by
generating possibilities until you get a match (i.e. dictionary or
rainbow table attacks on cryptographic hashes).

Good point.

-- 
Cheers,
Josh



More information about the ILUG mailing list
Read this without the formatting.
                                                                                                    

 

Hosted by HEAnet


Maintained by the ILUG website team. The aim of Linux.ie is to support and help commercial and private users of Linux in Ireland. You can display ILUG news in your own webpages, read backend information to find out how. Networking services kindly provided by HEAnet, server kindly donated by Dell. Linux is a trademark of Linus Torvalds, used with permission. No penguins were harmed in the production or maintenance of this highly praised website. Looking for the Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
RSS Version
Powered by Dell