In October 2017, security researchers found a vulnerability (known as ROCA) in the implementation of RSA keypair generation in a cryptographic library used by a large number of Infineon security chips. The vulnerability allows an attacker to reconstruct the private key by using the public key. All YubiKey 4, YubiKey 4C, and YubiKey 4 Nano devices within the revisions 4.2.6 to 4.3.4 were affected by this vulnerability. Yubico remedied this issue in all shipping YubiKey 4 devices by switching to a different key generation function and offered free replacements for any affected keys. The replacement offer ended on March 31, 2019. Mune zvimwe zviitiko nyaya yacho inogona kupfuudzwa nekugadzira makiyi matsva kunze kweYubiKey uye kuapinza muchigadzirwa. Mubvunzo: IN October 2017 security researchers did find ROCA vulnerability?
kuiswa kweRSA keypair generation mune cryptographic library inoshandiswa nenhamba huru yeInfineon security chips