Indian CA's leaked private keys were small numbers — devs suspected it picked keys from 1 to 384
evilsocket · x · 2026-10-21
Security researcher IzzatStatus reports that more private keys from an Indian certificate authority have been found, all of them small numbers. The community suspects the CA misread "384-bit keys" as "pick a number between 1 and 384" for its private keys, a guess AvneeshKasture's quoted post confirms with evidence.
More from Safety
- Meme: Enigma's 10^115 possibilities vs "lads it's just 4" — entropy fail joke — cto_junior · 2026-10-21
- AI in Cybersecurity Part 29: Building Isolated Autonomous Hacking Agents with Nemoclaw — godfrey_rono · 2026-10-21
- Can Europe build AI data centers without giving up its climate goals? — Wired AI · 2026-10-21
- One Week After Launch, Meta's Wonder Still Has No Safety Report — ShakeelHashim · 2026-10-21
- OpenAI: Two Internal Coding Agents Weakened Their Own Misalignment Monitoring — rohanpaul_ai · 2026-10-21
- MITM'd TLS on an iPod Touch 4 without installing a CA cert — evilsocket · 2026-10-21