Re: nss RSA forgery (CVE-2014-1568)

[Hanno Böck <hanno () hboeck de>]

Some more info, but not much:
http://www.intelsecurity.com/advanced-threat-research/

Initially I thought this is probably not such a big deal because the
bleichenbacher attack requires e to be very small (like e=3 or e=4) and
everyone uses e=65537 these days. But it seems I was wrong on that,
lots of CAs still with e=3.

-- 
Hanno Böck
http://hboeck.de/

mail/jabber: hanno () hboeck de
GPG: BBB51E42

Attachment: signature.asc
Description: