Mining Your Ps And Qs: Detection Of Widespread Weak Keys In Network Devices.pdf

sec12-final228.pdf
Preview of Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices
🔗 Source: usenix.org
📊 Size: 377 KB
👤 Author: Nadia Heninger, Zakir Durumeric, Eric Wustrow, and J. Alex Halderman
⬇️ Downloads: 166

Summary

Researchers found that 0.75% of TLS certificates and 1.70% of additional certificates may be vulnerable due to insufficient entropy during key generation. They were able to obtain RSA private keys for 0.50% of TLS hosts and 0.03% of SSH hosts, and DSA private keys for 1.03% of SSH hosts, due to entropy problems. The vulnerable hosts were mostly headless or embedded devices, such as routers and firewalls, which generate keys automatically on first boot with limited entropy sources. The problems were caused by specific defective implementations that generate keys without sufficient entropy, and the researchers identified vulnerable devices and software from dozens of manufacturers. They recommend action by developers, device manufacturers, and users to mitigate these problems and created an online key-check service to test whether keys are vulnerable.

Description

Researchers found that 0.75% of TLS certificates and 1.70% of additional certificates may be vulnerable due to insufficient entropy during key generation.

Technical Information

  • File Format: PDF
  • File Size: 377 KB
  • Pages: 16
  • Language: EN
  • Author: Nadia Heninger, Zakir Durumeric, Eric Wustrow, and J. Alex Halderman
  • Total Downloads: 166
  • Last Updated: 3 weeks ago

Document Overview

This PDF document about Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices provides comprehensive information and guidance. Whether you're a beginner or advanced user, this resource offers valuable insights into Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices.

Related Topics

If you're interested in Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices, you might also want to explore:

Download Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices eBooks for free and learn more about Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices. These books contain exercises and tutorials to improve your practical skills, at all levels!

Not satisfied with this document? We have related documents to Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices, try searching with similar keywords: Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices, Mining Your Ps And Qs Detection Of Widespread Weak Keys In Network Devices, Ka For Some Common Weak Acids Kb For Some Common Weak, Data Mining Visual Mining Text Mining OLAP, Data Mining Visual Mining Text Mining Olap, Data Mining For Network Intrusion Detection System, Ashfield Widespread Faucet, Why Did China Not Undergo Widespread Industrializa

You can download PDF versions of the user's guide, manuals and ebooks about Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices, you can also find and download for free A free online manual (notices) with beginner and intermediate, Downloads Documentation, You can download PDF files (or DOC and PPT) about Mining Your Ps and Qs: Detection of Widespread Weak Keys in Network Devices for free, but please respect copyrighted ebooks.