Unverified50% confidenceEventExact time
The eight NIST P-384 elliptic curve keys generated by the Indian CA eMudra during its key signing ceremony all had private keys of 47 bytes of zeros (i.e., a near-zero tiny value, jokingly called '4').
1
Sources
50%
Confidence
Long-term
Relevance
10/22/2026
First Seen
Sources
Related Entities
Related Claims
Unverifiedv3 .onion addresses use an Ed25519 elliptic curve key pair, derived by taking the full public key, hashing it with SHA3-256, and encoding the result in Base32, yielding a 56-character address (including the checksum).63% similarUnverifiedSecurity researcher Scott Helme disclosed that the CA keys of the Indian certificate authority eMudhra have serious flaws and can be cracked in milliseconds.63% similarUnverifiedv2.1.286 fixes multiple key redaction issues, including no longer exposing credential values when Bearer or Basic appears before the key name in error messages, and the issue of percent-encoded Bearer tokens being only partially masked.61% similarUnverifiedEd25519's design makes the easy implementation also the safe implementation: signatures are deterministic, a corrupted nonce does not leak the private key; X25519 has no invalid-curve attacks to defend against; keys are only 32 bytes.61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1085502API
curl https://kongchang.com/api/v1/knowledge/claims/1085502MCP
get_claim(id=1085502)