ROCA Crypto Flaw could have big Impact on Internet of Things

A firmware flaw in Infineon Trusted Platform Module (TPM) chipsets' RSA key-generation library weakens generated RSA keys such that an attacker with access to the public key may recover the corresponding private key (practical for keys <2048 bits). The issue spans many vendors and device types, vendors have released firmware updates and Microsoft provided workarounds, but patching at scale is difficult and the vulnerability may persist across IoT and embedded supply chains.