The developers of PuTTY have released an update to address a severe vulnerability that could allow attackers to recover secret keys.
This vulnerability, tracked as CVE-2024-31497, affects PuTTY’s handling of ECDSA nonces specifically with NIST P-521 keys.
Researchers from Ruhr University Bochum found that PuTTY generates heavily biased nonces, enabling full secret key recovery after observing around 60 valid ECDSA signatures under the same key.
PuTTY is widely used for SSH, Telnet, and other network connections.
#PinedaCyberSecurity #CyberSecurityMakesSenseHere #PuTTY #SecurityUpdate #CVE202431497 #Cybersecurity #SSH #Telnet #NetworkSecurity #Vulnerability #SecretKeys #InfoSec
