Zero‑Filled RSA Keys Enable Fast Factoring of Legacy TLS and SSH certs
Trail of Bits discovered "short‑sleeve" RSA keys riddled with zero blocks that appear in real‑world TLS certificates and SSH hosts. Polynomial‑time factoring cracks these keys, expanding the weak‑RSA landscape beyond ROCA and Coppersmith. The flaw hits legacy NetApp and CompleteFTP implementations, exposing thousands of devices.