[46465] in cryptography@c2.net mail archive
Re: Exponent 3 damage spreads...
daemon@ATHENA.MIT.EDU (Philipp =?iso-8859-1?q?G=FChring?=)
Mon Sep 25 18:32:49 2006
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
From: Philipp =?iso-8859-1?q?G=FChring?= <pg@futureware.at>
To: cryptography@metzdowd.com
Date: Mon, 25 Sep 2006 01:28:34 +0200
In-Reply-To: <45149E3B.3070509@echeque.com>
X-MDaemon-Deliver-To: cryptography@metzdowd.com
Hi,
We have been researching, which vendors were generating Exponent 3 keys, an=
d=20
we found the following until now:
* Cisco 3000 VPN Concentrator
* CSP11
* AN.ON / JAP (they told me they would change it on the next day)
(perhaps more to come)
My current estimate is that 0.26% of the certificates in the wild have=20
Exponents <=3D17
Best regards,
Philipp G=FChring
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com