OpenSSL 1024-bit RSA encryption cracked

OpenSSL Vulnerability

 

"Severe vulnerability", really? It requires physical access...

 

I knew I had seen this "voltage attack" somewhere else recently. And I was right.. Looking at the names of the scientists in the first article and in this newer OpenSSL article, one can see they are the same people.

As for both attacks, neither have anything to do with weaknesses in RSA or OpenSSL -- these are hardware "side-channel" attacks. One thing is certain -- these scientists must be looking for research grants as they know how to keep their names in the news by making the same attack look like different attacks.