In a first, cryptographic keys protecting SSH connections stolen in new attack

[M6]

An error as small as a single flipped memory bit is all it takes to expose a private key.

[Continua...]

In Ars Technica, 13 de Novembro de 2023

[Rui Carlos]

Acho que é desta que mudo para chaves ECDSA 😄 

 

Algo que também me chamou a atenção:

Citação

The reason: By comparing the malformed signature with a valid signature, the adversary could perform a GCD—or greatest common denominator—mathematical operation that, in turn, derived one of the prime numbers underpinning the security of the key. This led to a series of attacks that relied on actively triggering glitches during session negotiation, capturing the resulting faulty signature and eventually compromising the key. Triggering the errors relied on techniques such as tampering with a computer’s power supply or shining a laser on a smart card.

Parece que os smart cards não são tão seguros como eu pensava.