Discussion
eMudhra says they used an HSM for the keys:
https://bugzilla.mozilla.org/show_bug.cgi?id=2083449#c11
> The hardware used for each of the issuers is in the attached file. These HSMs are FIPS 140-2 Level 3 compliant.
> The Ultimaco devices were used to generate the ECC, RSA key pairs for the issuers.
tl;dr
b) an approved deviation to our usual KGC to test a wrap/unwrap was introduced as these keys were meant for export for this instance
c) a flaw in the code resulted in the second pair of keys being created onboard which were weaker
d) these second pair of weaker keys were used by mistake to create the csr (because the key labels were similar) and signed by our root
@q3k there is "weaker", and there is "private keys fit one byte".
What the actual four…
Install Fedizen
Get the full app experience
@q3k funny how literally everyone always introduces an "l" into "Utimaco".