Flüpke: "The private key (D) is 4. No j…" - chaos.social

A private key with the secret scalar value (D) of 4 was discovered in use by the certificate authority eMudhra, which is highly unusual and insecure. This was verified using OpenSSL commands, revealing that the key’s private component was effectively minimal and predictable. The discovery sparked criticism and disbelief over the poor security practices, including speculation about possible sabotage or negligence in key generation. The issue raises serious concerns about the trustworthiness and security of certificates issued by this CA.