[SSL Observatory] exponent 1 rsa keys

Jonathan Lassoff jof at thejof.com
Mon Nov 7 00:49:26 PST 2011


On Mon, Nov 7, 2011 at 12:44 AM, Hanno Böck <hanno at hboeck.de> wrote:
> A ruby bug is making rounds that keys created with the ruby ssl
> bindings had an exponent 1:
> http://svn.ruby-lang.org/cgi-bin/viewvc.cgi?view=revision&revision=33633
>
> Anyone seen such a key in the wild? I've checked the observatory
> database and found none there.

I've yet to run into any issues with this.

While this is a *really* bad bug, it only existed in the development
tree of Ruby for about a month.
As far as I know, no release versions were cut from that code during
the window of breakage.

Cheers,
jof



More information about the Observatory mailing list