One of eMudhra's certificate authority private keys is the number 4.
Not a number that starts with 4, or the number 4 followed by a few hundred random digits, just, 4... Another one is 56, and another is 115. I know, because I recovered all of them from their
Glancing over the code, it looks like https://github.com/google/paranoid_crypto/blob/main/paranoid_crypto/lib/ec_single_checks.py#L91 could detect this issue. It also links to previous research: https://www.ise.io/research/ethercombing-finding-secrets-in-popular-places/ .
score 1 · canonical