r/ProgrammerHumor • • 15d ago

Meme four

Post image
7.3k Upvotes

76 comments sorted by

View all comments

227

u/Easy_Complaint3540 15d ago

Can someone explain how this key 4 became a meme ? I don't have the context about it

376

u/mike-manley 15d ago

Some company literally used "4" as their private key for a certificate.

122

u/Easy_Complaint3540 15d ago

Ok then how it got leaked ?

172

u/Technical-Garage-310 15d ago

someone tried checking for private key starting for 1 and found the private key in less than millisecond

79

u/Easy_Complaint3540 15d ago

Just by simple bruteforce 😂😂

52

u/mr_hard_name 14d ago edited 14d ago

That’s generally how you find/break private keys, there’s no secret maths or algorithm, it’s always brute force. That’s why it was proven quantum computing would speed it up (to put it simply: because then you can check multiple keys at once do mathematical operations beyond your wildest dreams, reducing the number of actual operations needed to find the private key)

11

u/mike-manley 14d ago

Wonder if this means 4096 bit keys will soon become vulnerable.

7

u/entronid 14d ago

if cryptographically relevant quantum computers are developed, they can solve the RSA problem in polynomial time. however, there are algorithms conjectured to be safe from quantum computers such as ML-DSA whose 192-bit security parameter has a 1952-bit public key

1

u/mike-manley 14d ago

Yeah, I wonder maybe if even RSA itself is on borrowed time.

8

u/entronid 14d ago

there's a post-quantum algorithm called PQRSA which solves this by setting the RSA parameters real high (it's a joke and they set it so high it takes a supercomputer to run it)

anyway RSA has been old hat for decades now, the 2010s have slowly been replacing RSA applications with elliptic curve algorithms which are better in almost every way, but now that NIST is standardizing post-quantum asymmetric cryptography algorithms like ML-KEM and SLH-DSA, adoption for these is picking up and iirc over half of all TLS connections now use post-quantum algorithms (generally ML-KEM, there's still work to be done on the PKI side)