Subject: Re: [Sidrops] Fermat Attack on RSA (TL; DR: no bad keys in the RPKI)

From: "Hollyman, Michael" <[email-masked]>
Date: Fri, 13 Jan 2023 17:43:08 +0000

Job, thanks for sharing this and doing the leg-work to test the certificates and objects.
A bonus is, I can work on my French reading the paper from 1643. __ 

Mike

On 1/11/23, 10:08 AM, "Sidrops on behalf of Job Snijders" <[email-masked] <mailto:[email-masked]> on behalf of job=[email-masked] <mailto:[email-masked]>> wrote:

Caution: This email originated from outside the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe. 

Dear all,

Hanno Böck published a paper "Fermat Factorization in the Wild" [1]
documenting an issue resulting from flawed RSA key generation functions.
More information: https://secure-web.cisco.com/1_K4CcvwrSEXEv8Sy8_-ybuTnW4HlBZxzzcvrrDKw60jmN-M6IOI5rhpdorEHIWiZXweNHXdmkdsoOp7dptcn6_vkh6_IRW2ps92cwXshKASULQIiIp5rIYyBnVLCESSJ4CmhxhKjyPuRAis8b5O7oh4Gj6kNfmrE8aoOKrBMqzygdnFwQfr54HUEYz98-OHCI_ARstlbuehXO-H4_I8bIu1yNU6hUKJ-dDj7jWrYQiXd8UOhEypJeEINVa13DlqOohvufSWRqsYElJTxJo5BnNuL-H6N98VjuiUr7HPWhNfzZRo7lnGp9V52Vav-hgod/https%3A%2F%2Ffermatattack.secvuln.info%2F <https://secure-web.cisco.com/1_K4CcvwrSEXEv8Sy8_-ybuTnW4HlBZxzzcvrrDKw60jmN-M6IOI5rhpdorEHIWiZXweNHXdmkdsoOp7dptcn6_vkh6_IRW2ps92cwXshKASULQIiIp5rIYyBnVLCESSJ4CmhxhKjyPuRAis8b5O7oh4Gj6kNfmrE8aoOKrBMqzygdnFwQfr54HUEYz98-OHCI_ARstlbuehXO-H4_I8bIu1yNU6hUKJ-dDj7jWrYQiXd8UOhEypJeEINVa13DlqOohvufSWRqsYElJTxJo5BnNuL-H6N98VjuiUr7HPWhNfzZRo7lnGp9V52Vav-hgod/https%3A%2F%2Ffermatattack.secvuln.info%2F>

The author also published a convenient utility to scan CA & EE X.509
certificates for known issues: https://secure-web.cisco.com/1DQRuWwoh-EZ-WpLXo5LCvrIhJspoPXcHXV9iHyClgzmEHafpq2qi90up2n4bpWbuGH1uh3fY8fhdDw_bgN4FqoN5iY0cGJOAdaTbHxKyRVrDIUp_iwBEhPpdi2kdU39ZCD5Pz5AQxubfNVzfQ3HFYkZITL86uc4UHf9odT3p3vYwSyjsRNrzlu5X1Lm0Y5CtQ4omq1AFgC7yvqnwGrvesbM1CjfAIedkTpY5mQ9qkLSnCovW6h1N0928bNRh8Yc9zGmq_2fcLQKyTUkrczWKmms9qZvx8gU55nKCNCnrxnBxzQit0pFinm8ha5HNR-Sk/https%3A%2F%2Fgithub.com%2Fbadkeys%2Fbadkeys <https://secure-web.cisco.com/1DQRuWwoh-EZ-WpLXo5LCvrIhJspoPXcHXV9iHyClgzmEHafpq2qi90up2n4bpWbuGH1uh3fY8fhdDw_bgN4FqoN5iY0cGJOAdaTbHxKyRVrDIUp_iwBEhPpdi2kdU39ZCD5Pz5AQxubfNVzfQ3HFYkZITL86uc4UHf9odT3p3vYwSyjsRNrzlu5X1Lm0Y5CtQ4omq1AFgC7yvqnwGrvesbM1CjfAIedkTpY5mQ9qkLSnCovW6h1N0928bNRh8Yc9zGmq_2fcLQKyTUkrczWKmms9qZvx8gU55nKCNCnrxnBxzQit0pFinm8ha5HNR-Sk/https%3A%2F%2Fgithub.com%2Fbadkeys%2Fbadkeys>

I scanned all currently valid RPKI certificates & signed objects and
found no bad keys. I suppose this is good news :-)

Kind regards,

Job

[1]: https://secure-web.cisco.com/1fLPbH53FioahJJukH4V9U2Ad41OWLvOiVmoJkNJoOQR-Rf5qxrbj6I8gZ6gM9MdTTTokKifhzVkzo21zz-qoBkNK2ikdIkYG5zT9E-YnDnLIVGhlbQ6itsS3jk90RcaZu9a5Ts1YAWNq0-kmT7v1oh1OM9D492dJyGhlf6pYsTjTaXiKU7mhsLqVqmhJSJJYgUU8xxpEoizG7AWhkYnDrFLpYgY7rs4OekAiRV0Fz3AS3qhdsv0bS6acKZ2DErJ7QPL-HegDKcZD6hsgxQyFoE_e0BN0PRvBpk9qLBXdVq-Fq4eOyJpDFj8pjUlIcN9Q/https%3A%2F%2Feprint.iacr.org%2F2023%2F026.pdf <https://secure-web.cisco.com/1fLPbH53FioahJJukH4V9U2Ad41OWLvOiVmoJkNJoOQR-Rf5qxrbj6I8gZ6gM9MdTTTokKifhzVkzo21zz-qoBkNK2ikdIkYG5zT9E-YnDnLIVGhlbQ6itsS3jk90RcaZu9a5Ts1YAWNq0-kmT7v1oh1OM9D492dJyGhlf6pYsTjTaXiKU7mhsLqVqmhJSJJYgUU8xxpEoizG7AWhkYnDrFLpYgY7rs4OekAiRV0Fz3AS3qhdsv0bS6acKZ2DErJ7QPL-HegDKcZD6hsgxQyFoE_e0BN0PRvBpk9qLBXdVq-Fq4eOyJpDFj8pjUlIcN9Q/https%3A%2F%2Feprint.iacr.org%2F2023%2F026.pdf> 

_______________________________________________
Sidrops mailing list
[email-masked] <mailto:[email-masked]>
https://secure-web.cisco.com/1JWWs_zZwuhwcntsZ0ttbYWX6khv_Oeac2UHP8ziqSRmotF7t2L9C7V0Rv20RVpy00mRQlVM6bYfJ4QMdNzQUFQ-IlawJDmeTQBlTADoLVNdKdsA9bBQ4h_djOwCBHkmz7yvs3k-YU5_dZEBEhDAdRaQrjregFfPTanbL1QrrnzEQ4ETYYCFRAD-TJYnyrQ1P2k5tucIvPoJ0ZBN2IzOUttAmTb6O3hah5pQrwpyqkcN5L7IUnLlvCGRy4uSq964BaduNVTr7eLthbwSCVHZvZPFNUUK7_gJtg1dhuYhw2AsSpjPbzaP_TODUMVHGD5WV/https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fsidrops <https://secure-web.cisco.com/1JWWs_zZwuhwcntsZ0ttbYWX6khv_Oeac2UHP8ziqSRmotF7t2L9C7V0Rv20RVpy00mRQlVM6bYfJ4QMdNzQUFQ-IlawJDmeTQBlTADoLVNdKdsA9bBQ4h_djOwCBHkmz7yvs3k-YU5_dZEBEhDAdRaQrjregFfPTanbL1QrrnzEQ4ETYYCFRAD-TJYnyrQ1P2k5tucIvPoJ0ZBN2IzOUttAmTb6O3hah5pQrwpyqkcN5L7IUnLlvCGRy4uSq964BaduNVTr7eLthbwSCVHZvZPFNUUK7_gJtg1dhuYhw2AsSpjPbzaP_TODUMVHGD5WV/https%3A%2F%2Fwww.ietf.org%2Fmailman%2Flistinfo%2Fsidrops>