A Clever RSA Attack Fooled a Hardware Vault—Here's What It Means for Crypto

Decrypt09-28 21:16

In brief Researchers at UC San Diego and France's INRIA forged RSA signatures on a 1,024-bit key inside a hardware security module, the kind of device custodians use to guard crypto keys, without ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2671285268?lang=en_US&edition=fundamental","thumbnail":"https://img.decrypt.co/insecure/rs:fit:3840:0:0:0/plain/https://cdn.decrypt.co/wp-content/uploads/2026/02/blockchain-decrypt-style-02-gID_7.jpg@webp","is_english":true,"pubTime":"2026-09-28 21:16","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2671285268","market":"nz","top_or_hot":-1,"title":"A Clever RSA Attack Fooled a Hardware Vault—Here's What It Means for Crypto","media":"Decrypt","content":"<div>\n<p>In brief\nResearchers at UC San Diego and France's INRIA forged RSA signatures on a 1,024-bit key inside a hardware security module, the kind of device custodians use to guard crypto keys, without ...</p>\n\n<a href=\"https://decrypt.co//379505/rsa-attack-without-stealing-key-what-it-means-crypto\">Source Link</a>\n\n</div>\n","source":"decrypt_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>A Clever RSA Attack Fooled a Hardware Vault—Here's What It Means for Crypto</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nA Clever RSA Attack Fooled a Hardware Vault—Here's What It Means for Crypto\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-09-28 21:16 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://decrypt.co//379505/rsa-attack-without-stealing-key-what-it-means-crypto><strong>Decrypt</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>In brief\nResearchers at UC San Diego and France's INRIA forged RSA signatures on a 1,024-bit key inside a hardware security module, the kind of device custodians use to guard crypto keys, without ...</p>\n\n<a href=\"https://decrypt.co//379505/rsa-attack-without-stealing-key-what-it-means-crypto\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"ETHV","symbol_name":"以太坊ETF-VanEck","start_time":0,"source_url":"https://decrypt.co//379505/rsa-attack-without-stealing-key-what-it-means-crypto","article_id":"2671285268","we_media_id":null,"thumbnails":["https://img.decrypt.co/insecure/rs:fit:3840:0:0:0/plain/https://cdn.decrypt.co/wp-content/uploads/2026/02/blockchain-decrypt-style-02-gID_7.jpg@webp"],"rights":{"source":"decrypt_highlight","url":"https://decrypt.co//379505/rsa-attack-without-stealing-key-what-it-means-crypto","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2671285268","pubTimestamp":1790601363,"columns":[],"sourceInfo":{"source_id":"decrypt_highlight","name":"Decrypt"},"weMediaInfo":null,"summary":"Researchers at UC San Diego and France's Institute for Research in Computer Science impersonated a hardware security module—a tamper-resistant device that stores private keys and signs on request—without ever pulling the key out of it. They detailed the attack in a paper submitted to the IACR Cryptology ePrint Archive on September 20.\nBut don’t panic, crypto holders. This is not a Bitcoin or Ethereum break. Bitcoin uses an elliptic curve digital signature algorithm, or ECDSA. (Its curve also sup...","collect":0,"end_time":0,"defaultTopTitle":"decrypt.co","property":[],"viewcount":null,"language":"en","relate_stocks":{"ETHV":"以太坊ETF-VanEck","BFJL":"FT Vest Bitcoin Strategy Floor15 ETF - July","BTCZ":"T-Rex 2X Inverse Bitcoin Daily Target ETF","CBXA":"Calamos Bitcoin 90 Series Structured Alt Protection ETF – April","MNRS":"GRAYSCALE BITCOIN MINERS ETF","ETHW":"以太坊ETF-Bitwise","BETH":"比特币&以太币期货ETF-ProShares","CBXJ":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - January","ETH":"低成本以太坊ETF-Grayscale","ETQ":"T-Rex 2X Inverse Ether Daily Target ETF","FETH":"以太币ETF-Fidelity","BITO":"比特币期货ETF-ProShares","BTC":"Grayscale Bitcoin Mini Trust","SETH":"1倍做空以太币期货ETF-Proshares","ETHA":"以太坊ETF-iShares","BRRR":"比特币ETF-CoinShares","EZBC":"比特币ETF-Franklin","QBF":"Innovator Uncapped Bitcoin 20 Floor ETF - Quarterly","DEFI":"比特币期货ETF-Hashdex","BTCI":"NEOS Bitcoin High Income ETF","EZET":"以太坊ETF-Franklin","ETHD":"ProShares UltraShort Ether ETF","CBXY":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - July","BTF":"比特币&以太币期货ETF-CoinShares","BITU":"2倍做多比特币期货ETF-Proshares","CBOA":"Calamos Bitcoin Structured Alt Protection ETF - April","ETHE":"最大以太坊ETF-Grayscale","CBOJ":"Calamos Bitcoin Structured Alt Protection ETF - January","BTCL":"T-REX 2X LONG BITCOIN DAILY TARGET ETF","ETHI":"Defiance Leveraged Long Income Ethereum ETF","YETH":"Roundhill Ether Covered Call Strategy ETF","BTCO":"比特币ETF-Invesco Galaxy","QETH":"以太坊ETF-Invesco Galaxy","BITX":"2倍比特币期货ETF-Volatility Shares","BCCC":"Global X Bitcoin Covered Call ETF","IBIT":"比特币ETF-iShares","BITY":"Amplify Bitcoin 2% Monthly Option Income ETF","ETCO":"Grayscale Ethereum HIGH Income ETF","ARKB":"比特币ETF-21Shares","BTRN":"比特币期货ETF-Global X","EETH":"以太币期货ETF-ProShares","ETHT":"ProShares Ultra Ether ETF","ETU":"T-Rex 2X Long Ether Daily Target ETF","CBTO":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - October","ETHU":"2倍以太币期货ETF-Volatility Shares","BTCW":"比特币ETF-Wisdom Tree"},"translate_title":"巧妙的 RSA 攻击愚弄了硬件金库——这就是它对加密货币的意义","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"CBXY":0.6,"ETHD":0.6,"BITO":0.6,"CBOJ":0.6,"CBXJ":0.6,"BFJL":0.6,"BTCL":0.6,"BTCO":0.6,"ETHV":0.6,"EZET":0.6,"ARKB":0.6,"BTCW":0.6,"QETH":0.6,"BTRN":0.6,"ETQ":0.6,"BTCZ":0.6,"ETCO":0.6,"ETHI":0.6,"FETH":0.6,"ETHW":0.6,"YETH":0.6,"SETH":0.6,"ETH":0.6,"CBXA":0.6,"MNRS":0.6,"BTF":0.6,"ETHA":0.6,"BCCC":0.6,"EETH":0.6,"BETH":0.6,"DEFI":0.6,"BITU":0.6,"BRRR":0.6,"ETHT":0.6,"ETU":0.6,"BITY":0.6,"EZBC":0.6,"ETHE":0.6,"QBF":0.6,"CBOA":0.6,"BTC":0.6,"BTCI":0.6,"IBIT":0.6,"BITX":0.6,"CBTO":0.6,"ETHU":0.6},"content_text":"In brief\nResearchers at UC San Diego and France's INRIA forged RSA signatures on a 1,024-bit key inside a hardware security module, the kind of device custodians use to guard crypto keys, without extracting the key.\nBitcoin and Ethereum sign transactions with elliptic-curve signatures such as ECDSA rather than RSA, and the paper's claims cover RSA only.\nThe attack needed about 2^32 signing requests (roughly 4 billion) and 1,380 CPU core-years, and the authors say it likely poses no immediate threat to most modern RSA deployments, which use padding.\nResearchers at UC San Diego and France's Institute for Research in Computer Science impersonated a hardware security module—a tamper-resistant device that stores private keys and signs on request—without ever pulling the key out of it. They detailed the attack in a paper submitted to the IACR Cryptology ePrint Archive on September 20.But don’t panic, crypto holders. This is not a Bitcoin or Ethereum break. Bitcoin uses an elliptic curve digital signature algorithm, or ECDSA. (Its curve also supports Schnorr signatures.) Ethereum, and most of the bigger blockchains, use the same. This paper is about Rivest-Shamir-Adlemen cryptography, or RSA, a different signature scheme.Myriad: How high will Bitcoin go? Click to make your prediction.Still, the result is a stress test of how keys get guarded. Institutional custody providers, per BitGo, use a hardware security module—a tamper-resistant box that companies use to guard keys— so that keys never exist outside the device. Here the key never left the device, and the researchers forged signatures anyway.They did switch off the hardware security module’s FIPS mode, a certified security setting, so it would sign unformatted numbers, and they used a test key of their own.They asked the box to sign roughly 4 billion numbers of their choosing, then did math on the answers. Think of a vault that never opens but stamps any blank paper you slide under the door. Ask enough times, and you can learn to make the stamp yourself.What's a signature?Every time you confirm a transaction, your wallet signs it with your private key. That digital signature is the proof that the key holder approved it, and that nobody altered the message on the way.RSA is one way of building that proof, created in 1977 by Ron Rivest, Leonard Adleman, and Adi Shamir, the \"S\" in the name.BitcoinBTC · USD$83,428−3.65%24H7D1M1YYTDSep 21Sep 23Sep 25Sep 27Sep 28$87.2k$85.7k$84.2k$82.7k24h HighHigh$84,94524h LowLow$82,581VolVol$1.8BMarket projectionsOdds by MyriadThis weekBelow $84,000Below $84k56% chanceThis monthBelow $84,000Below $84k56% chance→Buy Bitcoin with USDTPowered by Jupiter$50$100$500BuyPrice data by CoinGeckoCoinGeckoMore Bitcoin news and projections →The key idea of RSA is that multiplying two enormous prime numbers is easy, but splitting the result back apart (called factoring) is brutally hard. The authors write that RSA's security is generally understood to rest on that difficulty, though breaking RSA has never been proven equivalent to factoring. This team never factored anything.Who is affectedStandard RSA signing applies padding—a scrambling and formatting step, such as PKCS#1 v1.5 or PSS, that runs before the math—and padded signatures don't create the exploitable oracle. The authors say the attack likely poses no immediate operational threat to most modern RSA deployments. The paper is a preprint.Some systems hand out the oracle on purpose. RSA-based blind signatures let a server sign something without seeing it, which is how one variant of Privacy Pass works. Cloudflare says Apple uses a version of Privacy Pass so users can prove they passed a check, like a CAPTCHA, without revealing who they are.Blind signatures have crypto roots. Cryptographer David Chaum used the technique when he founded DigiCash in 1989.The bigger threat is still quantum\"RSA is broken\" headlines have a track record. In January 2023, Chinese researchers claimed a quantum method that threatened RSA, but had only factored a 48-bit number, and experts dismissed it. This time the demonstration is an actual 1,024-bit key, with an asterisk the size of the oracle.The authors call their result classical evidence for moving away from RSA during the post-quantum transition, meaning the shift to encryption built to survive quantum computers.For Bitcoin, the quantum question is elliptic-curve signatures. Caltech researchers estimated at the end of March that 10,000 to 20,000 qubits—the quantum version of bits—could be enough to run Shor's algorithm, the method that threatens these signatures.Google has set 2029 as its deadline to finish migrating its own systems to post-quantum cryptography.Daily Debrief NewsletterStart every day with the top news stories right now, plus original features, a podcast, videos and more.Your EmailGet it!Get it!","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.50.1","shortVersion":"4.50.1","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2671285268","isCrawlerRequest":true}