GitHub yakavharira makiyi eSSH evashandisi veGit vatengi vanoshandisa kiyiraibhurari yeJavaScript kugadzira makiyi. Semuenzaniso, makiyi eGit mutengi GitKraken akavharirwa. Kusagadzikana kunotungamira kukugadzirwa kwemakiyi eRSA anofungidzira nekuda kwekukanganisa kunoderedza zvakanyanya kunaka kwe entropy kana uchigadzira kutevedzana kwemakiyi. Nyaya yacho yakagadziriswa mukeypair 1.0.4 uye GitKraken 8.0.1 yakabudiswa.
Chikonzero chekusagadzikana kwaive kushandiswa kwe "b.putByte(String.fromCharCode(inotevera & 0xFF))" panguva yekugadzira kiyi, zvisinei nekuti nzira yeCharCode yakadanwa zvakare nenzira ye putByte. Kufona kubva kuCharCode kaviri ("String.fromCharCode(String.fromCharCode(inotevera & 0xFF)") yakaita kuti yakawanda yeentropy buffer izadzwe nemaziro,kureva. kiyi yakagadzirwa kubva pane "random" data, 97% inosanganisira zero.
Source: opennet.ru