2026-09-11 13:06 UTC
Oh damn I had not seen the details of the MicroTik RCE: the client can send a public RSA key with correct N and e = 1 and the server will use it.
Two primitives/protocol things that would have prevented it: if RSA was defined with a fixed e, and if SSH clients sent a key hash instead.
https://github.com/advisories/GHSA-j9wg-77fw-f22f
Replies (1)
-
@kasperd@westergaard.social 2026-09-11 13:51
Would it have helped if the authorized_keys file contained hashed versions of the public key? As far as I recall it worked that way when using SSH protocol version 1.