The ROBOT Attack

I am affected, what shall I do? If you use one of the products that provides a fix you should of course install the update. However, we recommend something else: Disable RSA encryption! ROBOT only affects TLS cipher modes that use RSA encryption. Most modern TLS connections use an Elliptic Curve Diffie Hellman key exchange and need RSA only for signatures. We believe RSA encryption modes are so ri

[at_yasu]

“ROBOT is the return of a 19-year-old vulnerability that allows performing RSA decryption and signing operations with the private key of a TLS server”

[bungoume]

PKCS#1v1.5 paddingの実装問題は実製品に結構あった、という話かな