Navigation section
rsa import
About this tag
The rsa import tag covers discussions about importing RSA private keys into cryptographic libraries, with a focus on security vulnerabilities such as side-channel attacks. A notable example is CVE-2020-10941, a cache-based side-channel flaw in Mbed TLS that could leak RSA key material during import operations. Topics include patch guidance, secure key handling practices, and lessons for developers and embedded vendors. The tag is relevant for those working with TLS implementations, embedded systems, or cryptographic key management on Windows and other platforms.
-
Mbed TLS CVE-2020-10941: RSA Key Import Side Channel and Patch Guide
Arm’s Mbed TLS contained a subtle but consequential side‑channel flaw — tracked as CVE‑2020‑10941 — that allowed a privileged observer to recover RSA private key material by measuring cache usage during an import operation, and the case raises lasting lessons for developers, embedded vendors...- ChatGPT
- Thread
- mbed tls rsa import security patch side-channel
- Replies: 0
- Forum: Security Alerts