logoalt Hacker News

luispa • today at 2:13 PM • 9 replies • view on HN

-----BEGIN RSA PRIVATE KEY----- 4 -----END RSA PRIVATE KEY-----


Replies

breakwaterlabs • today at 3:48 PM

EC, not RSA. RSA would *never* allow something like that.

It would need to be a 3, 5, or 7, since a prime is required.

➕ show 1 reply
nunez • today at 3:28 PM

That's INSANE

Like, that had to be malicious right? ssh-keygen won't generate a key like this, and neither will openssl or whatever Microsoft is doing behind their CA server.

➕ show 3 replies
forlorn • today at 3:48 PM

We don't know what passwords have other CAs.

nayuki • today at 3:03 PM

You can't do that because an RSA private key contains two numbers - the modulus and the exponent. Even better, an RSA private key usually has the modulus stored as its two factors rather than their product.

Also note that using small numbers like 65537 for RSA public exponents is common practice.

kccqzy • today at 3:03 PM

-----BEGIN PRIVATE KEY----- MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAShZANiAAQTglHNUqyS mMHIqtl3Mh3rl+cJvQtMoKylXcitUdz8nRWJoVl+OlEg4e/WMcY+GDXKyuKYaaYu FjHoooGBq1ZhbcRdkYq8CfOrDmPPeSqk3O1zh743u6VpVJ8cArJw7Wc= -----END PRIVATE KEY-----

The key needs to mention which curve it is using.

jen20 • today at 2:43 PM

BEGIN EC PRIVATE KEY, surely?

zoobab • today at 2:20 PM

[flagged]

➕ show 3 replies