[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID:
<SYDP300MB26667054F34F423B01008BB84EEE662@SYDP300MB266670.AUSP300.PROD.OUTLOOK.COM>
Date: Wed, 21 Oct 2026 09:04:45 +0000
From: Peter Gutmann <pgut001@...auckland.ac.nz>
To: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>
CC: Dennis Jackson <djackson@...illa.com>
Subject: Re: eMudhra Intermediates Compromise
Solar Designer <solar@...nwall.com> writes:
>I guess all other keys corresponding to CA root and intermediate certs will
>now be audited for having potentially weak private keys.
Let's Encrypt has done this, at least for public keys, for awhile now, for
example they apply Fermat's factorisation method to detect unsuitable keys
with too-close p+q (I think it was L-E anyway, I found it when I was checking
my own code which does the same thing).
Peter.
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
