Russ Cox on Mythryl: “RSA should be retired. Yes you can technically do it right, but…”

RSA should be retired. Yes you can technically do it right, but there is so much history of doing it wrong. Just stop. Throw it all away, and move on to less error-prone systems.

Filippo Valsorda@filippo.abyssdomain.expert

Oh damn I had not seen the details of the MicroTik RCE: the client can send a public RSA key with correct N and e = 1 and the server will use it. Two primitives/protocol things that would have prevented it: if RSA was defined with a fixed e, and if SSH clients sent a key hash instead.

github.comCVE-2026-67276 - GitHub Advisory DatabaseRouterOS does not compare the complete RSA public key...

11/9/26, 3:22 pm6 reposts41 likes

Post