Comment

Comment on What is behind the current Lemmy meme about 4 being a private key?

lamp@lemmy.world ⁨1⁩ ⁨week⁩ ago

By “export” I think they mean export off of the hardware security module (HSM). Not export geographically.

Sort:hotnew top

Kazumara@discuss.tchncs.de ⁨1⁩ ⁨week⁩ ago
I’m not so sure. Because shortly after the above quote they answered this to the next question:

Is there any reason which may explain why the A and A-1 ECDSA keys appear to be unaffected by similar issues? The A and A-1 series were created in Entrust HSMs and were meant for deployment only in India.

And previously in Comment 10 they said about the bad keys

These ICAs were generated from the same key ceremony on Apr 30, 2025. The G3B and G3C ICAs were created for European and US operations respectively but they were not put into production except #2 in the list below but no end entity certificates were issued from these. The Code Signing issuers were not put into production also did not issue any certificates.

That’s why I think somehow the intended place of use made a difference in their process. But it could be you’re right and they still mean HSM export, because the keys need to go to the region of use, and aren’t transported physically in the HSM.

source