> https://twitter.com/CasCremers/status/1217517133074182145 https://twitter.com/CasCremers/status/1217517133074182145 1. Find an ecc root cert C 2. Create C'

> https://twitter.com/CasCremers/status/1217517133074182145 https://twitter.com/CasCremers/status/1217517133074182145 1. Find an ecc root cert C 2. Create C' with the same public key and curve but set the generator to the public key of C 3. Create a normal signing cert C'' with key pair (pk'',sk'') and sign software/cert with sk'' 4. Sign C'' with sk=1 5. Ship software/cert with C'' and C' This degenerate case was just confirmed to work…