Post #1544718
2024-04-16 02:40 UTC
@simontatham @indigoparadox If I understand from skimming the link, this solely affects PuTTY (on Windows) and /not/ other implementations of SSH, right?
Replies (2)
-
@indigoparadox@mastodon.social 2024-04-16 02:41
@lispi314 @simontatham The issue is solely with PuTTY, but any key that's been used with PuTTY can be assumed compromised (even if generated elsewhere) due to the PuTTY handling it making the private key retrievable based on the encrypted traffic.
-
@simontatham@hachyderm.io 2024-04-16 06:10
@lispi314 @indigoparadox PuTTY on any platform, actually. PuTTY can run on Unix too, though it's less popular there. And its ECDSA signing code is the same wherever it's running. Independent implementations such as OpenSSH aren't affected, that's correct.