Unverified50% confidenceFactExact time
The ROCA vulnerability disclosed in 2017 (CVE-2017-15361) stemmed from Infineon's RSA key generation implementation using a non-standard prime generation method, allowing attackers to factor 1024-bit RSA keys within hours and affecting hundreds of millions of smart cards and TPM chips worldwide.
1
Sources
50%
Confidence
Long-term
Relevance
7/24/2026
First Seen
Sources
AI审计密码库实战：在Cloudflare CIRCL中发现了什么
hackernewshackernews7/7/2026
Related Claims
UnverifiedCVE is a global vulnerability identification system maintained by the U.S. MITRE Corporation and funded by the U.S. Department of Homeland Security; since its launch in 1999, it has catalogued more than 200,000 vulnerability entries.67% similarUnverifiedTiming side-channel attacks can recover private keys bit by bit through precise timing of a large number of cryptographic operations combined with statistical methods; examples include the Bleichenbacher attack against OpenSSL RSA and the Cache-Timing attack against AES lookup tables.67% similarUnverifiedRSA encryption relies on the difficulty of large integer factorization, elliptic curve cryptography relies on the discrete logarithm problem, and cryptographic security is built on the assumption that certain problems are computationally hard to solve.67% similarVerifiedThe CVE (Common Vulnerabilities and Exposures) database is the world's most authoritative vulnerability numbering system, with new vulnerabilities being disclosed and recorded every day.66% similarUnverifiedThe principle of timing attacks can be traced back to a 1996 cryptography paper by Paul Kocher, in which he demonstrated that private keys could be inferred by measuring tiny timing differences in RSA decryption operations.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/609010API
curl https://kongchang.com/api/v1/knowledge/claims/609010MCP
get_claim(id=609010)