Fault Analysis on RSA Signing

Published

2018-08-14 16:39

Collected

2026-07-03 04:31

---
id: 2026
title: "Fault Analysis on RSA Signing"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/"
published_at: "2018-08-14T16:39:52Z"
tags: ["cryptography", "tls", "rsa", "symbolic-execution", "private-key-recovery", "manticore", "fault-attack", "mbed-tls"]
phying_url: "https://phying.com/item/2026"
lang: en
---

# Fault Analysis on RSA Signing

## Summary

A Trail of Bits intern modeled RSA-CRT fault attacks at the machine level, using Manticore to flip bits and show how a faulty partial signature lets attackers factor n and recover private keys.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2018-08-14T16:39:52Z
- **Original:** https://blog.trailofbits.com/2018/08/14/fault-analysis-on-rsa-signing/
- **Phying News:** https://phying.com/item/2026