truly a wild time to be alive when the cryptography world is split between those worried about quantum computers and those whose private key is “4”
Commenti (33)
This is the shit you fire people for, whole teams, and their management chain. Byeeeee.
@molly0xfff@hachyderm.io Jeez it's a bizarre one. Just how the hell that can it ever happen. How can a serious company not have governance over something so critical. Was is sabotage? etc.
@molly0xfff@hachyderm.io @darryl_ramm@hachyderm.io
The company should be permanently removed from any CA stores IMO.
@molly0xfff@hachyderm.io Coincidentally I picked today to wear the "RIP Diffie–Hellman" shirt @heretohinder@mastodon.sdf.org designed. It's definitely "broken" today!!
@molly0xfff@hachyderm.io I’m just imagining someone to finally build a quantum computer to crack a root CA certificate, and finally, after decades of cutting-edge science and billions of dollars in investment, the screen just shows “Private Key Solved: 4”
This was the post that made the shitposts I'd been scrolling by make sense. Thank you. 🙏
@molly0xfff@hachyderm.io @MOULE@mastodon.moule.world
So impressively insane!
“A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237.”
@molly0xfff@hachyderm.io
To be fair, if you asked me to guess your private key, I would be very unlikely to guess '4' …
@molly0xfff@hachyderm.io Maybe a dumb question, but uh... should we be trying small numbers for all of the other certs? 👀
I guess we can stop building all those datacenters now. The number was 4.
I heard rumor about this earlier today and dismissed it as a funny joke.
Still funny, but now also a horror story.
@molly0xfff@hachyderm.io Douglas Adams knew this, but somehow it got transcribed wrong when he read the line:
"The answer to life, the universe, and everything is four, too."
@molly0xfff@hachyderm.io Hold up - I thought that was an exaggerated joke.
But...but I guess it was determined by dice roll, guaranteed to be random?
@molly0xfff@hachyderm.io the spectre flaw, is promising a lot more holes than what everyone is prepared for.
@molly0xfff@hachyderm.io
Why does the headline sound like a push to put everything under corporate and state control? 🤔
)}]
@molly0xfff@hachyderm.io
it's ok to both be worried about small nuclear reactors but also worry about someone putting sugar into the gas on your internal combustion engine...