An ssl certificate provider used 4 as their private key. This should be hundreds of characters long. Somebody figured this out and was able to issue their own certificates based on it. This results in loss of trust in their certificates which is a big deal.
It is compared as bigger than one of the largest security issues in IT the last couple of years since it forces everybody to patch their shit to not trust this certificate chain. And lots of stuff aren’t patched that easily.
I get what you mean, but no, it would not be secure. The private key in question is really used as a number in a calculation, not as a string of digits. Leading zeroes would just be ignored.
An ssl certificate provider used 4 as their private key. This should be hundreds of characters long. Somebody figured this out and was able to issue their own certificates based on it. This results in loss of trust in their certificates which is a big deal.
It is compared as bigger than one of the largest security issues in IT the last couple of years since it forces everybody to patch their shit to not trust this certificate chain. And lots of stuff aren’t patched that easily.
I bet they used 0000000000…004
See, hundreds of digits long!
I mean …. Yes, that would be secure.
Sorta.
It’s be dumb, and a pattern based attack could potentially solve it easily … but technically much more secure than
4I get what you mean, but no, it would not be secure. The private key in question is really used as a number in a calculation, not as a string of digits. Leading zeroes would just be ignored.
not when it’s a representation of bits in a file
The key itself being 00000000004 yah
The key file being
0000000000000000000000……4 is a different story