News for hackers. Stuff that matters.
Re:The Million-Key Question: Investigating the Origins of RS... by acqq on Wednesday August 10, 2016 @02:18PM (#12263764)
Yes, from what I've read, the researchers discovered that the PGP keys were made by the PGP software and so on.
Re:The Million-Key Question: Investigating the Origins of RS... by schoen on Wednesday August 10, 2016 @03:59PM (#12264395)
This kind of inference can be interesting, because occasionally people try to convert a private key from one type to another; for example, there are scripts to convert a private key between PEM, OpenSSH, and GPG formats so that you can re-use it for different applications. (One application for this is to use GPG signatures on public keys to authenticate users and/or servers in SSH.)

So this research might allow someone who didn't already know to recognize more about where a key came from.

Re:The Million-Key Question: Investigating the Origins of RS... by petrs on Wednesday August 10, 2016 @05:18PM (#12264821)
Verification that TLS keys are mostly generated by OpenSSL and PGP keys by PGP/GPG are sanity check that method actually works.

If it will turn out, that particular library has vulnerability, one can quickly search for other vulnerable keys from large datasets like IPv4-wide TLS scans.