RUG.TOOLS
RUG.TOOLS
Launchpad
exploitshigh

Weak RSA and DSA keys exposed by CompleteFTP generation bug

By Rug.Tools Security Desk

What was reported

Trail of Bits reports that a CompleteFTP big-integer type mismatch produced vulnerable RSA and DSA host keys between December 2016 and December 2023. The researchers recovered 603 unique RSA private keys and 74 DSA keys from internet scans and say affected users should check and regenerate keys.

Why it matters

Compromised or factorable host keys can undermine the security of systems relying on them for authentication or encryption.

Evidence and limitations

  • The source describes a cryptographic key-generation flaw, not a supported-chain-specific incident.
  • Trail of Bits attributes the vulnerability to older CompleteFTP big-integer code.
  • The source says CompleteFTP released a tool to identify keys requiring regeneration.

Rug.Tools has not independently verified the publisher's incident claims. Reported allegations remain attributed to Trail of Bits; they are not presented as deterministic Rug.Tools findings.

Original source

Source publication time:

Read Trail of Bits

This report summarizes attributed source material and automated editorial checks. It is not a legal finding or investment advice. Rug.Tools does not identify a person or organization as responsible without independently verified evidence, and a token is never labeled safe merely because no incident appears in this feed. Reports may be corrected or unpublished when source information changes.