ROCA fingerprints found on crt.sh (was Re: Efficient test for weak RSA keys generated in Infineon TPMs / smartcards)

[Erwann Abalea via dev-security-policy]

Estonian eID being affected, the 2 keys allowed to sign the Estonian TSL are 
weak. These are the only TSL signer keys vulnerable. This was notified 
yesterday.
(TSL is a list of Qualified trust service providers issued by every Member 
State, a list of Trust Anchors for eIDAS)
_______________________________________________
dev-security-policy mailing list
dev-security-policy@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-security-policy