In association with heise online

25 March 2013, 11:52

Weak keys in NetBSD

  • Twitter
  • Facebook
  • submit to slashdot
  • StumbleUpon
  • submit to reddit

NetBSD logo


The programming flaw can cause a system to generate random numbers that aren't particularly random. The risk is especially high when a system is booting because during that time, the system has very little entropy at its disposal. The issue also has a particularly serious effect on 32-bit platforms, where only cryptographic keys with 32 bits of potential entropy can be generated. Brute forcing the resulting 4 billion possibilities is technically feasible.

SSH server keys are particularly in danger as they are usually generated while the system is booting. All SSH server keys that were generated on NetBSD 6 systems should be replaced immediately. Since the ECDSA algorithm was only introduced with the affected version 6, it is very likely that the systems will have newly generated keys which will have been heavily weakened by the "lack of actual randomness".

The incident is reminiscent of the Debian debacle in 2008, although the Debian issue affected a far greater number of systems. That was caused by a flawed patch in Debian's OpenSSL package which allowed potential attackers to crack any keys that were generated with OpenSSL under Debian in a short time.



  • July's Community Calendar

The H Open

The H Security

The H Developer

The H Internet Toolkit