⬇ Download holy card: ·
Saint Kr00k, of the All-Zero Key
Patron of Wi-Fi chips, sudden disconnections, and keys made entirely of zeros.
Life
On 26 February 2020, at the RSA conference, ESET researchers presented Kr00k, CVE-2019-15126. In Broadcom and Cypress Wi-Fi chips, after a disconnection, data still in the queue went out encrypted with a key made of nothing but zeros: anyone nearby could trigger the disconnection and read those fragments. According to ESET over a billion devices were affected, from phones and laptops to speakers and routers.
Prayer
O Saint Kr00k, who encrypts with zero and thinks himself safe, let our chips empty the queue before saying goodbye. Amen.
How to celebrate
Celebrated by updating firmware and operating systems and using HTTPS even on the home Wi-Fi.
A key of zeros keeps nobody's secret.