| ▲ | deoxykev 2 hours ago | |
Seems like the root cause here was human error during EMudhra's key generation ceremony process. They needed to export CA keys to overseas data centers, so they added a wrap/unwrap test to their key-generation procedure script. Somehow that generated a second set of weak (test?) keys from the CryptoServer Se-Series Gen2 HSM. Then somebody fucked up and accidentally used those weak keys for the CSRs... then their root and Sectigo signed it. And it shipped. That's why the private keys are literally one byte. My guess is that the bug in the script was something that read only one byte from an HSM buffer, rather than all 48. | ||