2nd crypto vulnerability today: 1024- and 2048-bit RSA keys are factorizable

On HN there's no harm in waiting until a thing actually happens. Matter of fact it's preferable.

> A 2nd major crypto vulnerability being disclosed Monday involves millions of 1024- and 2048-bit RSA keys that are practically factorizable.

This doesn't mean all 1024- and 2048-bit RSA keys are vulnerable, just that there is some collection of millions of them that are (e.g. due to bad randomness re-using a lot of prime factors, see for example [1]).

1: https://eprint.iacr.org/2016/515.pdf

"The flaw resides in the Infineon-developed RSA Library version v1.02.013, specifically within an algorithm it implements for RSA primes generation. The library allows people to generate keys with smartcards rather than with general-purpose computers

...

While costs and times vary for each vulnerable key, the worst case for a 2048-bit one would require no more than 17 days and $40,300 using a 1,000-instance machine on Amazon Web Service and $76 and 45 minutes to factorize an affected 1024-bit key. On average, it would require half the cost and time to factorize the affected keys. All that's required is passing the public key through an extension of what's known as Coppersmith's Attack."

https://www.bleepingcomputer.com/news/security/tpm-chipsets-...