Factoring "short-sleeve" RSA keys with polynomials

Published

2026-06-12 11:00

Collected

2026-07-03 03:23

---
id: 1266
title: "Factoring \"short-sleeve\" RSA keys with polynomials"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2026/06/12/factoring-short-sleeve-rsa-keys-with-polynomials/"
published_at: "2026-06-12 11:00"
tags: ["vulnerability-research", "cryptography", "rsa", "dsa", "key-generation", "completeftp", "badkeys", "factorization"]
phying_url: "https://phying.com/item/1266"
lang: en
---

# Factoring "short-sleeve" RSA keys with polynomials

## Summary

Trail of Bits and the badkeys project found hundreds of biased RSA and DSA keys that a new polynomial-based technique can quickly factor, tracing many to a big-integer bug in CompleteFTP.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2026-06-12 11:00
- **Original:** https://blog.trailofbits.com/2026/06/12/factoring-short-sleeve-rsa-keys-with-polynomials/
- **Phying News:** https://phying.com/item/1266