- What: Discovery of weak RSA keys with patterns of zeros
- Impact: Potential risks for encryption security
Encryption Researchers discover new class of weak RSA keys in the wild June 29, 2026 Share By SC Staff (Adobe Stock) A new class of weak RSA keys, characterized by an abundance of zeros, has been discovered in real-world use. These keys were found through the badkeys project, an open-source service designed to identify public keys with known vulnerabilities. The research by Trail of Bits analyzed a vast collection of keys from various public sources, including Certificate Transparency logs and internet-wide scans, Schneier on Security reports. The identified weak keys exhibit patterns of regularly spaced blocks of zeros. One pattern was found in certificates issued to large organizations like Yahoo and Verizon, and on some NetApp devices. Although these specific certificates have expired, the findings were shared with the affected companies. Another pattern was observed on SSH hosts running CompleteFTP software. The vulnerability impacts RSA keys generated between December 2016 and March 2019 (versions 10.0.0-12.0.0) and DSA keys generated between December 2016 and December 2023 (versions 10.0.0-23.0.4). While this affects a small percentage of internet hosts, the discovery highlights a concerning trend of similar cryptographic implementation failures across different products, suggesting the potential for wider exploitation and the need for tailored cryptanalytic approaches. Source: Schneier on Security SC Staff Related Data Security Trump signs executive order to accelerate US quantum computing strategy SC Staff June 29, 2026 Trump order accelerates U.S. quantum strategy, boosting post-quantum security. Encryption Trump administration accelerates transition to post-quantum encryption SC Staff June 23, 2026 The executive actions direct the government to support the quantum computing industry, building on previous efforts in artificial intelligence. Encryption Apple releases quantum-resistant code and verification tools SC Staff May 27, 2026 The release includes implementations of ML-KEM and ML-DSA, two quantum-secure algorithms, along with the formal verification libraries and tools Apple developed. Get daily email updates SC Media's daily must-read of the most current and pressing daily news Business Email By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy . Subscribe Related Terms Byte Data Warehousing Diffie-Hellman Digital Envelope Digital Signature Emanations Analysis Encapsulation GPG (GNU Privacy Guard) Public-Key Forward Secrecy (PFS) Signals Analysis You can skip this ad in 5 seconds