Urgent.News

What's breaking now, across thousands of outlets.

Tech

I've factored the RSA keys of a Certificate Authority from the 90s

In a recent exploration of the security of RSA cryptography, an individual has factored the RSA keys of a Certificate Authority from the 1990s. RSA's security relies on the difficulty of factoring large semiprime numbers, but the definition of "large" is significant. By the 90s, there were no standards or minimum requirements for RSA keys, leading to the factoring of small RSA keys on modest desktop computers.

The individual downloaded archives of old root certificates from Internet Explorer and Netscape, which were then factored using the CADO-NFS algorithm on a Ryzen 9 5950X desktop. This process took 32 hours for the E-Certify RSA 512 Gold Server and 29 hours for the E-Certify RSA 512 Gold Client. The public keys of these root certificates can be used to reconstruct the private key, allowing for the issuance of certificates that would work in Netscape 4.51.

The factored private keys and tools are available in a GitHub repository, along with instructions for setting up a custom old-timey TLS server. The individual also factored a code signing CA from Internet Explorer 3.02.

Written by urgent.news from Hacker News's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

This story

This is one outlet's version. Read the fullest account.

Read the original at mcpherrin.ca →

More in Tech

After the Sprint: A 72-Hour Build Retrospective - Spoiler: It Wasn't Secure

I built Charitas Clew for a 72-hour DEV Weekend Challenge. It worked. I submitted it. And then I did something slightly inconvenient: I kept poking at it.

  • Charitas Clew product transformed bureaucratic notices into simpler language
  • Antigravity and Dr. Kahlo assessed and enhanced product security
  • Lack of automated test suite and ineffective prompt-injection defense identified

Build a local call-review panel with Python

An audio analysis response is easier to inspect when you can hear the passage beside its transcript. This tutorial builds a local review page that lets you replay a speaker turn, search the words or annotations, and read vocal-expression scores separately from what was said.

  • Create local call review panel using Python
  • Use saved response and licensed recording
  • Generate HTML file with audio player

More from Tuesday 8 September →