Critical PuTTY Client Vulnerability Lets Attackers Recover Private Keys

A severe vulnerability has been discovered in the PuTTY client and related components, allowing attackers to fully recover NIST P-521 private keys. The PuTTY client generates heavily biased ECDSA nonces when using the NIST P-521 elliptic curve, causing the vulnerability tracked as CVE-2024-31497. PuTTY Client Vulnerability The PuTTY client and all related components, including FileZilla, […]

The post Critical PuTTY Client Vulnerability Lets Attackers Recover Private Keys appeared first on Cyber Security News.

attackers client components critical curve cve cve-2024 cyber security ecdsa elliptic keys nist private private keys putty recover vulnerability