Test the server key to check if it is not factorable
tomato42 opened this issue · 2 comments
tomato42 commented
There are not insignificant number of devices that generate or use RSA keys that can be factored, there should be either a mode, or few simple checks to see if the key can't be easily factored.
jvehent commented
I think this would be better as an analysis worker in tls-observatory.
tomato42 commented
yeah, full blown test is definitely not doable by the regular test, but they did find few primes that are common, so checking few dozen of those could be done during the scan (for single host run) or when aggregating results (when scanning multiple hosts)