Cleveland, Ohio, December 16, 2019 -- Keyfactor, a provider in securing digital identities, announced research findings identifying a vulnerability across active RSA certificates. RSA certificates and the RSA algorithm are commonly used to securely transmit data to a remote source. Using minimal computing resources, researchers were able to collect and analyze 175 million RSA certificates and keys used to protect real-world Internet traffic.
"The findings are alarming," said Ted Shorter, chief technology officer and co-founder at Keyfactor. "The research finds inordinate rates of compromise impacting IoT devices with design constraints and limited entropy. These devices could include cars, medical implants and other critical devices, that if compromised, could result in life-impacting harm."
The active and publicly available RSA keys (which consist of the product of two large, randomly chosen primes) were mined to identity common factors. Any keys sharing one of their prime factors with another key are compromised by this technique. The analysis found over 435,000 certificates with a shared factor, with researchers able to rederive the private key.
....NOTE - content continues below this message
DON'T MISS THIS!
We invite you and your colleagues to join us LIVE as we take the highest rated industry conference to the next level! the 2022 World's Best! - join us and the elite in the industry at the 17th annual NEXT GENERATION Contact Center & Customer Engagement GLOBAL Best Practices Conference!
>>>>> FIND OUT MORE: HERE
"In a real-world attack scenario, a threat actor with a re-derived private key for an SSL/TLS server certificate could impersonate that server when devices attempt to connect," said JD Kilgallin, senior integration engineer and researcher at Keyfactor. "The connecting user or device cannot distinguish the attacker from the legitimate certificate holder, opening the door to critical device malfunction or exposure of sensitive data."
When these devices include medical implants and cars, the impact of the malfunction can be devastating. The research stresses the importance of security best practices, random number generation for connected systems and use of cryptography to securely install firmware and software updates through the lifecycle of the device.
"Security at design is paramount for device manufacturers," said Shorter. "Current-generation connected devices and systems must be equipped to defend against a new generation of security risks. Cryptography is essential in ensuring new and emerging devices are able to adhere to and scale with security best practices."
Founded in 2001, Keyfactor is a market leader in comprehensive digital security management.
About MRB PR:
MRB PR is a public relations company.
Published: Tuesday, December 17, 2019
In-house surveys can be time consuming, cumbersome at best and many staff often don't provide valid feedback as they fear ‘being too honest' with their employer for fear of retribution.
Even some 3rd party ‘managed' surveys can be challenging, costly and then there is no benchmark or significant value other than ‘managed by a 3rd party' approach, which leads to the problem of validity of data, security and integrity plus costs and time required by you.
TopPlace2Work is an easy to use program that allows you to gather valuable data on employee morale and engagement.