Dossier
Public-Key Cryptography
Coverage of Public-Key Cryptography in the Nexus archive.
- Google’s synchronized passkeys can be stolen in ‘Pass‑ta‑key’ attacks
Researchers discovered malware can steal Google synchronized passkeys through Google Password Manager, exploiting vulnerabilities in the software despite passkeys being based on public-key cryptography. The 'Pass-ta-key' attacks include scenarios where malware creates unauthorized logins, re-enrolls devices, or decrypts passkeys using a master encryption key.
- Why Post-Quantum Cryptography Starts With Credentials
Current encrypted data, such as credentials, may lose confidentiality in the future as quantum computers could break public-key cryptography. While existing machines cannot yet compromise elliptic curve cryptography or RSA, rapid advancements in quantum hardware necessitate new protective measures for organizational data.