gay | wwhyte

wwhyte Jul 04, 2012 07:00

[cryptography] Key extraction from tokens (RSA SecurID, etc) via padding attacks on PKCS#1v1.5
This is a great description of the attack on RSA tokens that's going to be presented at Crypto. It turns out that PKCS#1 padding is so broken that you can use its flaws to decrypt any message, even messages that weren't encrypted using PKCS#1 in the ( Read more... )