The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237.
Anybody else just got troubles with this? At work, we’re just finding out if the certs were trusted and where exactly.
My colleague was laughing his head off all morning. Never a good sign when we start laughing a lot, in our office :,D