[46465] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: Exponent 3 damage spreads...

daemon@ATHENA.MIT.EDU (Philipp =?iso-8859-1?q?G=FChring?=)
Mon Sep 25 18:32:49 2006

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
From: Philipp =?iso-8859-1?q?G=FChring?= <pg@futureware.at>
To: cryptography@metzdowd.com
Date: Mon, 25 Sep 2006 01:28:34 +0200
In-Reply-To: <45149E3B.3070509@echeque.com>
X-MDaemon-Deliver-To: cryptography@metzdowd.com

Hi,

We have been researching, which vendors were generating Exponent 3 keys, an=
d=20
we found the following until now:

* Cisco 3000 VPN Concentrator
* CSP11
* AN.ON / JAP (they told me they would change it on the next day)
(perhaps more to come)

My current estimate is that 0.26% of the certificates in the wild have=20
Exponents <=3D17

Best regards,
Philipp G=FChring


---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post