HNHacker News
TopNewBestAskShowJobs

nspaced

72 karma · joined September 18, 2017

Computer security at Google, but what I post here are my own opinions :)
submissionscomments
nspaced··on eMudhra to exit global SSL/TLS certificate business
Sure, but I think you'll agree that calling this modified version RSA is a bit of a stretch :)

Every definition of RSA I've ever seen requires d and e to be coprime with λ(n)

nspaced··on eMudhra to exit global SSL/TLS certificate business
d=4 is not a valid RSA private key. When p and q are prime λ(n) = lcm(p − 1, q − 1) is always even. e must be coprime with λ(n) so it's odd. de ≡ 1 (mod λ(n)) which means that de is 1 + an even number, so d must also always be odd.
nspaced··on Spaghettifying DRAM
You can already load your own microcode, and it also works on newer CPUs than the one that the attack described in the OP targets. https://github.com/google/security-research/tree/master/pocs...
nspaced··on AMD: Microcode Signature Verification Vulnerability
Hi, I'm one of the authors and yes it was :)
nspaced··on NeuG USB True Random Number Generator
The joint entropy of two random variables is never less than the individual entropies.