Now would be an *excellent* time for someone to go through the list of major trusted root certificates and their intermediates, exhaustively, and spend 30 seconds of CPU time bruteforcing the private keys for each one.
Did we find all of them already or is there more low hanging fruit?
@azonenberg how's that going to help with intermediate CAs? We don't know that we've seen all of them.
@vathpela Are intermediates required to be listed in CT logs?
@azonenberg good question. I hope so, but I certainly can't say with authority.
That'd still only get you to the point of enumerating them, not necessarily being able to test them.
@vathpela it's at least a step in the right direction
@azonenberg You know, someone should have a good, skeptical look at the entropy of the 8 RSA codesign certs apparently generated on the same hardware, too.
@azonenberg I did up through 1B but it was only on 48 CPU cores.
https://infosec.exchange/@tychotithonus/117474729512946714
@tychotithonus @azonenberg This is good news but not as funny as it could have been.