This information is out-of-date.

Several assumptions were made about the bootloader which made the feasibility of this attack much less likely. Only chance of getting keys now is to factorize the public keys. Hash collision attack still seems possible.

Follow @freemymoto for other efforts.