Scott Lurndal wrote:


To be more precise,

Precise? That is a swear word to "big picture" people...

the recent issue with RSA factoring related to
weak PRNG implementations was primarily limited to embedded devices
such as routers and gateways. None of the factorable (and they used
a rather clever method using GCD to factor the keys) keys were
associated with any major website, or with any key signed by a
trusted certification authority (e.g. verisign et. al.). It seems
the bulk of the bad keys were generated on embedded devices, when
first powered on, when the PRNG hadn't had enough entropy to
guarantee randomness.

Yeah - what he said... I think...

--

-Mike-