So a certificate authority used “4” as a private key? Oof. XKCD being a little too prophetic.
I’ve added minimum size checks to various RustCrypto crates which received a surprising amount of pushback from people who really want to use insecure keys for whatever reason.
I’m wondering if I should promote them to constant-time minimum entropy checks.
https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html
Tony “Abolish ICE” Arcieri🌹🦀
npub1es…2z8gv
2026-10-20 18:25:21 UTC
Author Public Key
npub1ese6na4ymxez6faql2zmqwp5f6vt5rc0zkhd54ykxwezk7ucry9sq2z8gvSeen on
wss://relay.ditto.pubPublished at
2026-10-20 18:25:21 UTCEvent JSON
{
"id": "82f4c3bc70f24368dfbbf1eeb5c2c8bbd32d0bd76d43f4d826d07012461b4df5",
"pubkey": "cc33a9f6a4d9b22d27a0fa85b038344e98ba0f0f15aeda549633b22b7b98190b",
"created_at": 1792520721,
"kind": 1,
"tags": [
[
"proxy",
"https://mas.to/users/bascule/statuses/117474638023320864",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "So a certificate authority used “4” as a private key? Oof. XKCD being a little too prophetic.\n\nI’ve added minimum size checks to various RustCrypto crates which received a surprising amount of pushback from people who really want to use insecure keys for whatever reason.\n\nI’m wondering if I should promote them to constant-time minimum entropy checks.\n\nhttps://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html",
"sig": "f73799ffd3ffc471fdc0764c7e5644cd6e78ad5554313950627dbb3698d549b813526fa57cd5ac1cba210081a45a93fe9e5b893f9738eed7b8e50dc83df42147"
}