smiletolerantly@awful.systems to Selfhosted@lemmy.worldEnglish · 21 hours agoPSA: eMudhra Intermediate CA Compromiseemudhra.we-have-a-problem.comexternal-linkmessage-square24linkfedilinkarrow-up187arrow-down10file-text
arrow-up187arrow-down1external-linkPSA: eMudhra Intermediate CA Compromiseemudhra.we-have-a-problem.comsmiletolerantly@awful.systems to Selfhosted@lemmy.worldEnglish · 21 hours agomessage-square24linkfedilinkfile-text
minus-squaretigerhawkvok@startrek.websitelinkfedilinkEnglisharrow-up7·17 hours agoI’m honestly skeptical about even this. I tried to generate an 8 bit key and got rsa_gen_set_params:key size too small. And like, you need to go deliberately out of your way to not use OpenSSL.
minus-squareSteveTech@aussie.zonelinkfedilinkEnglisharrow-up3·6 hours agoThey were proper 384bit certs, just the upper 376 bits were 0 in all the listed certs. So it’s different to setting the key size in OpenSSL, and they were most likely rolling their own crypto.
I’m honestly skeptical about even this. I tried to generate an 8 bit key and got
rsa_gen_set_params:key size too small.And like, you need to go deliberately out of your way to not use OpenSSL.
They were proper 384bit certs, just the upper 376 bits were 0 in all the listed certs. So it’s different to setting the key size in OpenSSL, and they were most likely rolling their own crypto.