2026-10-08 12:14 UTC
Can we spot structural anomalies in RSA keys before we even know their vulnerability signature? Our latest research says yes. Today, we are releasing ECGS-RSA, a Python-based research tool that uses the Exact Centered Gram Synthesis (ECGS) to make these public traces visible.
By computing algebraic features from public RSA moduli, ECGS evaluates deviations from a reference model. In our testing across a million keys and real Spanish DNIe certificates, it revealed ROCA structures naturally, without relying on the ROCA fingerprint itself.
The tool supports everything from raw RSA keys and X.509 certificates to TLS endpoints and signed PDFs.
Link to ECGS RSA tool "ecgs-rsa-v014.zip":
https://www.researchgate.net/publication/415394576_ecgs-rsa-v014zip
Link to paper "Detecting ROCA Without Its Fingerprint: ECGS Reveals Persistent Algebraic-Residual Structure in RSA Public Keys":
https://www.researchgate.net/publication/415394497_Detecting_ROCA_Without_Its_Fingerprint_ECGS_Reveals_Persistent_Algebraic-Residual_Structure_in_RSA_Public_Keys
Replies (0)
No replies.