The Patching Friars' AlmanacA calendar of CVE saints

Feast day October 16

ROCAHoly card for roca, generated with AI (Claude, Anthropic) for the Lunario dei Frati Patchatori.CC BY-NC-SA 4.0 ROCA PRIMUS NON CASUALIS
🤖 Image and text generated with AI

⬇ Download holy card: ·

Embed on your site

Saint ROCA, the Return of Coppersmith

Patron of electronic identity cards, Infineon TPM chips, and prime numbers that are too predictable.

Life

On 16 October 2017 researchers at Masaryk University in Brno revealed that the RSA library in Infineon chips generated primes with a recognisable structure. One look at a public key told you whether it was vulnerable, and Coppersmith's method could rebuild the private key, at a high cost but within reach of anyone with resources. TPMs, tokens and smart cards were affected, including about 750,000 Estonian identity cards, which had to be updated in a hurry.

Prayer

O Saint ROCA, who recognises keys by their shape, let our primes be chosen truly at random. Amen.

How to celebrate

Celebrated by updating the TPM firmware, regenerating keys and checking them with the discoverers' tool.

A prime with a pattern gives the game away.

Technical record

Disclosed on
October 16 2017
CVE
CVE-2017-15361

The Infineon RSA library 1.02.013 in Infineon Trusted Platform Module (TPM) firmware, such as versions before 0000000000000422 - 4.34, before 000000000000062b - 6.43, and before 0000000000008521 - 133.33, mishandles RSA key generation, which makes it easier for attackers to defeat various cryptographic protection mechanisms via targeted attacks, aka ROCA. Examples of affected technologies include BitLocker with TPM 1.2, YubiKey 4 (before 4.3.5) PGP key generation, and the Cached User Data encryption feature in Chrome OS.

Sources: crocs.fi.muni.cz

📅 Add to your calendar

SaintsGoogle CalendarApple, Outlook (.ics)

Observances (feasts, scourges and miracles)Google CalendarApple, Outlook (.ics)

In Google Calendar you can also paste the URL in Settings → Add calendar → From URL. The first sync can take a few hours.