One of eMudhra's certificate authority private keys is the number 4.
Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from their
Part of the issue is that there are a lot of distinct ways to fuck up generating a private key, and by design you can’t exactly work backwards from the public one.
Usually things look fine, but weak entropy means you can somehow predict the private key. People haven’t really bothered trying single bytes, because generally keys are generated, and not input by hand.
Part of the issue is that there are a lot of distinct ways to fuck up generating a private key, and by design you can’t exactly work backwards from the public one.
Usually things look fine, but weak entropy means you can somehow predict the private key. People haven’t really bothered trying single bytes, because generally keys are generated, and not input by hand.
score 1 · canonical