Conversation

So a certificate authority used “4” as a private key? Oof. XKCD being a little too prophetic.

I’ve added minimum size checks to various RustCrypto crates which received a surprising amount of pushback from people who really want to use insecure keys for whatever reason.

I’m wondering if I should promote them to constant-time minimum entropy checks.

https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html

This incident makes me wonder if there’s anything similar to CertSpotter ingesting CT logs and continuously running lattice attacks on every ECDSA signature in them, and if not, should there be 🤔