DSA/DSS keys and DSA 1576-1/CVE-2008-0166.


DSA/DSS keys and DSA 1576-1/CVE-2008-0166.
\ Kurt Roeckx (14 May 2008)
. \ Mario 'BitKoenig' Holbe (14 May 2008)
. \ Andrew McGlashan (15 May 2008)
. . \ Mario 'BitKoenig' Holbe (15 May 2008)
. \ Mario 'BitKoenig' Holbe (15 May 2008)

2 msg	openssl/openssh fixes for lenny (testing)
2 msg	openssl / x509 certs
2 msg	leakage of keys?
2 msg	dowkd.pl - how the blacklist data is generated ?
9 msg	Re: [SECURITY] [DSA 1576-1] New openssh package...
4 msg	dowkd.pl via Package
1 msg	CHAO BAN
48 msg	Re: [SECURITY] [DSA 1571-1] New openssl package...
4 msg	Broken link on Debian CVE Web page (Was: [SECUR...
11 msg	Re: [SECURITY] [DSA 1571-1] New openssl package...
3 msg	Re: [SECURITY] [DSA 1575-1] New Linux 2.6.18 pa...
1 msg	Mystery of Lyle & Louise is Making Headlines
1 msg	Herr Bühler Arbeite nicht mehr bei der V-ZUG AG
5 msg	Re: [SECURITY] [DSA 1573-1] New php5 packages f...
4 msg	Re: [SECURITY] [DSA 1572-1] New php5 packages f...
3 msg	Question about Security
37 msg	securing server
1 msg	Re: [SECURITY] [DSA 1570-1] New kazehakase pack...
2 msg	Re: [SECURITY] [DSA 1569-1] New cacti packages ...

Subject:	DSA/DSS keys and DSA 1576-1/CVE-2008-0166.
Group:	Debian-security
From:	Kurt Roeckx
Date:	14 May 2008

There seems to be some confusion going around about the effect of the
openssl issue on dsa keys.

>From what I understand, when using a DSA key and the random number used
to generate a signature is known, predictable, or used twice the private
key can be calculated.

So it seem to me that if a DSA key was ever used on a system which had
that openssl version and openssl was used to generate that random
number, you have to revoke that DSA key. Even if that DSA key was
generated with a good version of openssl.

So my question is, does either the ssh client or server use openssl to
generate the random number used to sign?

Kurt

--
To UNSUBSCRIBE, email to debian-security-REQUEST
with a subject of "unsubscribe". Trouble? Contact listmaster