{
  "id": 6208274,
  "title": "I've factored the RSA keys of a Certificate Authority from the 90s",
  "url": "https://urgent.news/2026/09/08/ive-factored-the-rsa-keys-of-a-certificate-authority-from-the-90s",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-09-08T01:16:59.000Z",
  "source": {
    "name": "Hacker News",
    "slug": "hacker-news",
    "url": "https://mcpherrin.ca/2026/09/07/rsa.html"
  },
  "original_language": "en",
  "account": "In a recent exploration of the security of RSA cryptography, an individual has factored the RSA keys of a Certificate Authority from the 1990s. RSA's security relies on the difficulty of factoring large semiprime numbers, but the definition of \"large\" is significant. By the 90s, there were no standards or minimum requirements for RSA keys, leading to the factoring of small RSA keys on modest desktop computers. The individual downloaded archives of old root certificates from Internet Explorer and Netscape, which were then factored using the CADO-NFS algorithm on a Ryzen 9 5950X desktop. This process took 32 hours for the E-Certify RSA 512 Gold Server and 29 hours for the E-Certify RSA 512 Gold Client. The public keys of these root certificates can be used to reconstruct the private key, allowing for the issuance of certificates that would work in Netscape 4.51. The factored private keys and tools are available in a GitHub repository, along with instructions for setting up a custom old-timey TLS server. The individual also factored a code signing CA from Internet Explorer 3.02.",
  "summary": null,
  "key_points": [
    "RSA keys of 1990s Certificate Authority factored",
    "E-Certify RSA 512 Gold Server and Client keys factored",
    "Public keys can reconstruct private keys for Netscape 4.51"
  ],
  "editors_take": "This development undermines the long-term security of systems that relied on weakly sized RSA keys, allowing for potential impersonation and certificate issuance on outdated browsers.",
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "Hacker News Best",
        "title": "I've factored the RSA keys of a Certificate Authority from the 90s",
        "url": "https://urgent.news/2026/09/08/ive-factored-the-rsa-keys-of-a-certificate-authority-from-the-90s-6243655",
        "published": "2026-09-08T01:16:59.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}