A new DUHK attack allows hackers to recover encryption keys from VPN connections and browsing sessions

in bitcoin •  7 years ago 

duhk.jpg

This exploit is labeled “Don't Use Hard-coded Keys” (DUHK) which is a new cryptographic vulnerability that could allow hackers to recover encryption keys used in secure VPN connections and web browsing sessions. Dozens of vendors are affected – Fortinet, Cisco,Techguard, and others which rely on ANSI X9.31 RNG, which is an old “not so random” number generation algorithm.

Authors get paid when people like you upvote their post.
If you enjoyed what you read here, create your account today and start earning FREE STEEM!