Researchers have discovered a novel method to forge RSA signatures using classical computing without factoring the key, reducing security to unacceptable levels. The attack is practical against 1024-bit keys and significantly reduces computational requirements compared to traditional factoring approaches, though widely used implementations remain safe.
Researchers have discovered a novel classical computing attack on RSA that enables signature forgery without factoring, reducing computational requirements by orders of magnitude. The attack is now practical for 1024-bit keys and significantly weakens 2048-bit and 4096-bit RSA security, though widely used implementations remain safe for now.
An open-source ML framework for mapping CVE vulnerabilities to NIST compliance controls using a fine-tuned 110M parameter encoder. The approach outperforms zero-shot foundation models and 7B LLMs, achieving 77.45% top-1 accuracy through contrastive fine-tuning, while hybrid search and generative reranking degrade performance.
Researchers have discovered a novel classical computing attack on RSA that enables signature forgery without factoring keys, reducing computational requirements by orders of magnitude. While immediately impractical against widely-deployed implementations, the method brings 1024-bit RSA attacks into feasibility and degrades security of larger keys below acceptable thresholds.
A comprehensive empirical study evaluates automated C-to-Rust refactoring tools (C2Rust-analyze, CROWN, C2SaferRust, FLOURINE) on 116 C programs with memory security bugs. Results show that while these tools reduce unsafe Rust code, they fail to reliably eliminate memory security vulnerabilities: 342 programs fail compilation, 177 inherit original C bugs, and 77 introduce new Rust bugs.
A fictional retrospective set in 2036 describes the discovery that RSA-2048 had been factored, revealed through a series of mysterious cryptocurrency thefts and subsequent cryptographic failures that led an ISP network administrator to deduce a breakthrough in solving hard mathematical problems, ultimately confirmed when the factors were posted anonymously.
NIST announced a $12,288 bounty in 2023 to crack five SHA-1 hashes of English sentences used to generate seeds for NIST elliptic curves, which power modern cryptography. The original creator, Dr. Jerry Solinas, passed away in early 2023 without revealing the phrases, leaving a cryptographic mystery that some fear could indicate intentionally weak curves.