Comment on OpenSSH Keys: A WalkthroughparentComments−phicoh9yObviously. But for checking the padding on a signature you only need the public key. So you cannot leak any sensitive RSA key material while checking the padding.−tptacek9yPadding attacks don't leak key material; they leak plaintext.−phicoh9yRight an attack on an RSA signature that leaks plain text. Really? Must be a super secret signature then.−tptacek9yYou should familiarize yourself with how RSA works, and what an RSA signature is.−benchaney9yWell in this case they potentially allow forgeries, but yes.
Comments
Obviously. But for checking the padding on a signature you only need the public key. So you cannot leak any sensitive RSA key material while checking the padding.
Padding attacks don't leak key material; they leak plaintext.
Right an attack on an RSA signature that leaks plain text. Really? Must be a super secret signature then.
You should familiarize yourself with how RSA works, and what an RSA signature is.
Well in this case they potentially allow forgeries, but yes.