Biased RSA private keys: Origin attribution of GCD-factorable keys

Adam Janovsky, Matus Nemec, Petr Svenda +2

In 2016, Svenda et al. (USENIX 2016, The Million-key Question) reported that the implementation choices in cryptographic libraries allow for qualified guessing about the origin of…