Unique Encryption Keys Not So Unique

Carl Livitt distills 'Ron was wrong, Whit is right': weak randomness left many RSA keys sharing prime factors, letting researchers derive secrets of a quarter-million SSL certificates.

Quarkslab gives a technical overview of security in ITU-T PON specs (GPON, XG-PON, XGS-PON, NG-PON2, 50G-PON), covering authentication, key derivation, and encryption of the shared fiber signal.

Trail of Bits and the badkeys project found hundreds of biased RSA and DSA keys that a new polynomial-based technique can quickly factor, tracing many to a big-integer bug in CompleteFTP.

Wiz on post-quantum cryptography readiness: how Shor's algorithm threatens RSA and ECC, why qubit counts mislead, and how the new PQC framework inventories at-risk encryption for migration.

A practical post-quantum guide: how AES, RSA, ECDH and KDFs orchestrate modern encryption (TLS walk-through), then the migration path to ML-KEM hybrids — risks and metrics included.

Based on dozens of mainframe assessments, NetSPI's 2025 State of the Platform report covers MFA adoption, DES-to-AES cryptographic modernization, and persistent security gaps in enterprise mainframes.