The sad thing is: I'd immediately believe if someone told me this was an HSM bug.
XFEDI
ActivityPubRemote profile
stacksmashing
I'm an IT security researcher, and sometimes I make videos about that!
Contact: [email protected]
Posts
And they said RSA would need a bignum library. uint8_t was enough all along!
Great performance optimization by eMudhra.
I doubt it.
(Not just 4, but 4, 56, 66, 115, 155, 156, 230, 237)
So the private-key for the eMudhra (revoked) intermediate was apparently 4.
How is the root still trusted? How broken are your processes if this can happen?
And honestly: How have we (as an industry) not noticed earlier :(