Editing Semantic security (section)

=== Failures of Randomness in the Past ===
Several cryptographic failures have resulted from weak randomness, allowing attackers to break encryption.

==== Debian OpenSSL Vulnerability (2008) ====
An error in Debian’s [[OpenSSL]] removed entropy collection, producing a small set of predictable keys. Attackers could guess [[Secure Shell|SSH]] and [[Transport Layer Security|TLS]] keys, allowing unauthorized access.<ref>{{cite web |last=Bello |first=Luciano |date=2008-05-13 |title=Debian OpenSSL Predictable Random Number Generator |url=https://www.debian.org/security/2008/dsa-1571 |access-date= |publisher=Debian Security Advisory}}</ref>

==== Sony PlayStation 3 ECDSA Failure (2011) ====
Sony’s [[PlayStation 3]] misused the [[Elliptic Curve Digital Signature Algorithm]] (ECDSA) by reusing the same [[Cryptographic nonce|nonce]] - a random number used once in cryptographic signing - in multiple signatures. Since ECDSA relies on unique nonces for security, attackers recovered Sony’s private signing key, allowing them to sign unauthorized software.<ref>{{cite web |last=Schneier |first=Bruce |date=2011-01-06 |title=Sony PS3 Security Broken |url=https://www.schneier.com/blog/archives/2011/01/sony_ps3_securi.html |access-date= |publisher=Schneier on Security}}</ref>

==== ROCA Vulnerability (2017) ====
A flaw in [[Infineon Technologies|Infineon's]] [[RSA (cryptosystem)|RSA]] key generation created weak keys that attackers could efficiently factor. This vulnerability affected smart cards and [[Trusted Platform Module|Trusted Platform Modules]] (TPMs), requiring widespread key replacements.<ref>{{cite web |date=2017-10-17 |title=ROCA: Infineon TPM and Secure Element RSA Vulnerability Guidance |url=https://www.ncsc.gov.uk/guidance/roca-infineon-tpm-and-secure-element-rsa-vulnerability-guidance |access-date= |publisher=National Cyber Security Centre}}</ref>