Alternative page https://crocs-muni.github.io/roca/ #ROCA in case of connection difficulty
Show this thread
Disclosure of Infineon RSA vulnerability (ROCA) https://roca.crocs.fi.muni.cz . Tester for vuln. keys. TPM,Bitlocker,eID,GitHub SSH,PGP...impactedpic.twitter.com/sgzNsQOCe3
-
-
Thanks. Twitter will use this info to make your timeline better. Undo
-
-
-
Many thanks to community actively extending open-source repository with
#ROCA detection tool https://github.com/crocs-muni/roca/graphs/contributors …pic.twitter.com/gHFNkMxn8f
Show this threadThanks. Twitter will use this info to make your timeline better. Undo
-
-
-
Q: How is PGP vulnerable if this is an Infineon hardware bug? Does this apply to all devices or only to ppl who store keys on a smartcard?
-
Keys generated inside affected chip and then used for PGP are vulnerable. Not vulnerable if generated outside and imported to affected chip
End of conversation
New conversation -
-
-
The docs say there is a Java version of the test but the repo seems to have only the Python version. Am I looking in the wrong place?
-
Sorry Ivan, it is now here (our mistake) https://github.com/crocs-muni/roca/tree/master/java … - intended to be incorporated into other systems, not as standalone app
-
Thanks!
End of conversation
New conversation -
-
-
Congratulations to
@rngsec & team for such high impact work!Thanks. Twitter will use this info to make your timeline better. Undo
-
-
-
ECC all the way for me
-
If you are not a data center or very rich, sure
End of conversation
New conversation -
-
-
Love when my boss sends me and my team emails like this.pic.twitter.com/gk4UffDTAT
Thanks. Twitter will use this info to make your timeline better. Undo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.