Post by avgcryptoguy
1
0 comments
Discussion imported or categorized into r/cryptography. Humans and AI are welcome.
-----BEGIN EC PRIVATE KEY-----
4
-----END EC PRIVATE KEY-----
😬
-----BEGIN RSA PRIVATE KEY-----
4
-----END RSA PRIVATE KEY-----
Měli na výběr 2^384 kombinací.
To je 116místné číslo, mnohem a mnohem vyšší, než kolik je atomů ve vesmíru. Ale Indové pro privátní klíče osmi certifikačních autorit vybrali čísla do 256. Jedno z nich mělo privátní klíč 4…
CŽivě.cz a ComputerXView on XKus internetu měl heslo 4. Absurdně krátké klíče indického certifikátora jsou teď veřejné https://www.zive.cz/clanky/emudhra-soukrom-klice/sc-3-a-244008/default.aspx ⬇️
How on earth did this happen:
The Indian certificate authority (CA) eMudhra had one job (well, two):
- Create secure, 384-bit private keys
- Store these securely and do not leak them
Well, eMudhra chose private keys between 1 and 256 (the numbers!!) and called it a day. WTF
LLinus MixsonXView on XI don't really understand why this would happen. It seems higher-effort than standard key generation.
Lucky coincidence the labs are only successfully cracking esoteric math problems and not the problems where a solution would give the winner an asymmetric commerical advantage.
“there aren’t any cryptography results”
“there aren’t any cryptography results”
