https://github.com/unnawut/roca-detect

A docker container that checks your keys for ROCA vulnerability.
https://github.com/unnawut/roca-detect

detector docker docker-container roca-detection roca-vulnerability rsa rsa-keys security security-audit security-tools ssh-key

Last synced: 15 days ago
JSON representation

A docker container that checks your keys for ROCA vulnerability.

• Host: GitHub
• URL: https://github.com/unnawut/roca-detect
• Owner: unnawut
• Archived: true
• Created: 2017-10-17T12:02:28.000Z (about 7 years ago)
• Default Branch: master
• Last Pushed: 2017-10-17T14:20:47.000Z (about 7 years ago)
• Last Synced: 2024-07-03T06:32:41.053Z (4 months ago)
• Topics: detector, docker, docker-container, roca-detection, roca-vulnerability, rsa, rsa-keys, security, security-audit, security-tools, ssh-key
• Homepage:
• Size: 1.95 KB
• Stars: 2
• Watchers: 2
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

        
# Docker Container for ROCA detection

A small docker container that set-ups and runs [roca-detect](https://github.com/crocs-muni/roca) to check if your keys are affected by [ROCA vulnerability](https://crocs.fi.muni.cz/public/papers/rsa_ccs17).

## Usage

Run the following docker command:

```

docker run --rm -v /path/to/your/keys:/keys --network none unnawut/roca-detect

```

Or analyze the keys in your current working directory:

```

docker run --rm -v $(pwd):/keys --network none unnawut/roca-detect

```

### Notes on the `docker` flags used:

`--rm` deletes the container after running. This ensures the container does not linger around with your keys data in there after the run.

`--network none` disables the container's network connection. This ensures your keys will not (intentionally or unintentionally) get sent out to the wide.