PuTTY vulnerability allows attackers to uncover private keys

[Daniel Puchert]

PuTTY vulnerability allows attackers to uncover private keys

A vulnerability within PuTTY version 0.68 through 0.80 allows attackers to recover a user’s private key using at least 60 digital signatures that use the Elliptic Curve Digital Signature Algorithm (ECDSA).

Researchers from Ruhr University Bochum, Fabian Baumer and Marcus Brinkman, first discovered the vulnerability, which is tracked as CVE-2024-31497.

 

[r00igev@@r]

If I've used kitty am I marked as safe?

KiTTY

www.9bis.net

 

[r00igev@@r]

BTW: dup thread

PuTTY vulnerability vuln-p521-bias

https://www.chiark.greenend.org.uk/~sgtatham/putty/wishlist/vuln-p521-bias.html

mybroadband.co.za