NoCoPilot
Posts : 20371 Join date : 2013-01-16 Age : 70 Location : Seattle
| Subject: Magazine: The Internet Protocol Journal Wed Mar 27, 2019 5:29 pm | |
| When I worked for Cisco I got a free subscription to this technical Cisco-sponsored journal, but it was always way, way, way over my head and so has always gone straight into the trash. My subscription ran out 1/15/2018 but they still send it to me, for some reason. It is still impenetrable. - Quote :
- OpenSSL generates primes that are congruent with 2 modulo 3. The resulting modulus is thus always congruent with 1 modulo 3, since:
(2 modulo 3) * (2 modulo 3) = 4 modulo 3 = 1 modulo 3 This formula reduces the possible key-tag space from 2*4*16*256 to 1*4*16*256, which is 16384. This reduction is the reason why it is not possible to generate a key-tag with the value 2015.
212 is congruent with 2 modulo 3. We now know that RSA moduli from OpenSSL are always congruent with 1 modulo 3, so key-tag 2015 is simply not possible when using OpenSSL. The IPJ does not have a centerfold model. |
|