Cryptographic keys protecting SSH connections stolen in new attack

Cryptographic keys protecting SSH connections stolen in new attack – ArsTechnica

#1

Post by mkolassa » Mon, Nov 13, 2023, 1:52 PM UTC

Cryptographic keys protecting SSH connections stolen in new attack – ArsTechnica
arstechnica.com

Re: Cryptographic keys protecting SSH connections stolen in new attack – ArsTechnica

#2

Post by bebop404 » Mon, Nov 13, 2023, 3:04 PM UTC

In certain closed-source implementations.

>"The researchers traced the keys they compromised to devices that used custom, closed-source SSH implementations that didn’t implement the countermeasures found in OpenSSH and other widely used open source code libraries. The devices came from four manufacturers: Cisco, Zyxel, Hillstone Networks, and Mocana. Both Cisco and Zyxel responded to the researchers’ notification of the test results before the completion of the study. Hillstone responded afterward."

Re: Cryptographic keys protecting SSH connections stolen in new attack – ArsTechnica

#3

Post by vGPU » Mon, Nov 13, 2023, 4:33 PM UTC

bebop404 wrote: post #2

In certain closed-source implementations. >"The researchers traced the keys they compromised to devices that used custom, closed-source SSH implementations that didn’t implement the countermeasures found in OpenSSH and other widely used open source code libraries. The devices came from four manufacturers: Cisco, Zyxel, Hillstone Networks, and Mocana. Both Cisco and Zyxel responded to the researchers’ notification of…