Passive SSH RSA Key Compromise via Lattices

Haven't read this yet but it looks significant. The attack relies on the presence of a fault so it's not like every ssh key everywhere is broken. But the abstract says 100s of broken keys have been found.