yubico.com/2017/10/infineon-rsa-key-generation-issue

the issue is with the TPM that generated the key on the Yubikey as far as I can gather

researchers seem to indicate it's not an RNG issue, but that the generated modulus values lend themselves to some variant of Coppersmith's attack

@SEJPM The old and wise generation used non public twatter DMs for that. ;)

@e-sushi Ha I couldn't help myself, but in my defense a good informant should never decide what is worth passing along to authorities...it's all important :D

@Lery @puzzlepalace got it right

Just sharing — cyber.dhs.gov

> Binding Operational Directive 18-01

> Enhance Email and Web Security

> safeguarding federal information and information systems