This one says it was a bad randomizer, which I vaguely recall as being behind another vulnerability from ~10 years ago where a researcher found that many RSA ke

This one says it was a bad randomizer, which I vaguely recall as being behind another vulnerability from ~10 years ago where a researcher found that many RSA keys shared a prime factor with another key, which allows the pair to be easily factored — so you could just iterate over all the pairs and quickly check which one share a factor, which breaks them. I’ll see if I can find details. Edit: found it: here’s the blog post where I first read about it: http://www.thebigquestions.com/2012/03/13/uh-oh/ http://www.thebigquestions.com/2012/03/13/uh-oh/