keybase / keybase/keybase-issues

Big exponents are exponents, too

Open
#1,246 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
No language data
Stars
899
Forks
40
PR merge metrics
No merged PRs in 30d

Description

In kbpgp, there is an RSA public key validity check complaining of exponents bigger than 2^16 + 1:

https://github.com/keybase/kbpgp/blob/04ca97eb1b29885c1358cea99135019851379c0c/src/rsa.iced#L198

But those are perfectly legal exponents! (I have one, for instance, in my key 0x9080C092EA80E0B4.) I got mine by using a vanity key generation tool.

I submitted a pull request on kbpgp to remove that check.

Contributor guide

No contributing guide indexed for this repository

Research direction

Review the RSA public-key validity check at src/rsa.iced#L198 in the referenced kbpgp repository, then compare it with the pull request mentioned in the issue. Done means valid public exponents larger than 2^16 + 1 are no longer rejected.

Written by the indexing model from the issue text.

Assessment

Domain
cryptography, security
Issue type
Bug
Difficulty
1/5
Estimated time
Under an hour
Activity status
Stale
Clarity
Clearly specified
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.