I wonder how someone stumbled upon this - maybe leaked by someone inside eMudhra?

Since there's nothing to indicate that the private key was all zeroes and one non-zero lsbyte, and presumably nobody would try to brute-force a private key.

▲

cvwright 5 hours ago | parent | next [-]

I suspect that they read the article last Friday about Claude finding the origin of the ECDSA constants. That was only a few hours before Google received the vulnerability report.

The two cases are very similar. The only difference is that the weak randomness was harmless in the earlier story, and here it’s devastating.

▲

hnfong 6 hours ago | parent | prev | next [-]

Of the thousands of people bored with a swarm of AI agents, is it not plausible that somebody would just say "hey, let's do a vibe check to see whether any CAs are trivially crackable"?

▲

consp 6 hours ago | parent | prev | next [-]

> and presumably nobody would try to brute-force a private key.

Why not? There are examples of RNGs providing very poor entropy which might be a reason to check it (looking at you Sony).

▲

nmeofthestate 5 hours ago | parent [-]

Just seems weird for anyone to focus on trying to crack private keys starting with absurd 8-bit values that "nobody would use for a private key", let alone bother to do it at all, given the search space.

	▲	consp 5 hours ago \| parent \| next [-]
		I would not expect anyone to be on the lookout continuously, but like the researcher doing a "yolo" and trying. There are enough people out there that it is likely to happen at least once in a while. Or for instance someone looking for a firmware exploit in a downstream device.
	▲	smaudet 4 hours ago \| parent \| prev \| next [-]
		And here you learn why security is often just theater (not saying a proper elliptic key is theater)... It took less than a second to factor this key. Why not attempt, say, to factor every CA, with a budget of less than a minute each? The reward/risk ratio is skewed so heavily in favor of trying, the only reason not to is this idea that it is "impossible". It's clearly not, hence, the theater. Your locks don't have to work, they often only have to look like they work...
	▲	5 hours ago \| parent \| prev [-]
		[deleted]

▲

jhalstead 4 hours ago | parent | prev [-]

This question seems to be answered in another comment now: https://news.ycombinator.com/item?id=50180284