Factor RSA Keys via Polynomial Attack on Biased Bits

RSA keys with 0-biased bits are factorable. Researchers found 603 RSA and 74 DSA keys via internet scans. Pattern 2 traces to a type mismatch in CompleteFTP versions 10.0.0–12.0.0 (RSA) and 10.0.0–23.0.4 (DSA). A polynomial-based technique exploits limb structure. CompleteFTP released a key-check tool. Yahoo, Verizon certificates affected but expired.