THREATOPS
THREAT OPSThreat News › Factoring "short-sleeve" RSA keys with polynomials

Factoring "short-sleeve" RSA keys with polynomials

lowtrailofbitsPublished 2026-06-12

<p>What happens when the bits of an RSA private key are heavily biased toward 0 instead of being randomly generated? The public key’s bits could be biased enough for us to detect these incorrectly generated keys in the wild. Together with Hanno Böck of the <a href="https://badkeys.info/">badkeys</a> project, we found hundreds of unique keys that not only have this property, but can be quickly fact

MITRE ATT&CK techniques

Indicators of compromise

Original source: https://blog.trailofbits.com/2026/06/12/factoring-short-sleeve-rsa-keys-with-polynomials/