|
|
|
|
|
by contentboot
1429 days ago
|
|
>Their attack uses binary search to recover the private RSA key after 1023 client logins I know this is from the initial paper but it is great to see practical examples of algorithms taught in college/uni. I always had trouble understanding why we are learning such hard topics to find the number 5 in a sorted list of 10 numbers. To keep things on topic. >The patches that MEGA developed to mitigate the original key recovery attack are
effective against our improved attack as well, so updated clients are not vulnerable to the
techniques presented in this work. However, our optimized cryptanalysis underscores the
ongoing risk to unpatched clients Great to hear that their patches fix the root of the problem but this paper has now significantly reduced the complexity of carrying out the attack. |
|