This paper points to OpenSSL with low entropy RNG being the culprit: https://freedom-to-tinker.com/blog/nadiah/new-research-theres-no-need-panic-over-factorable

This paper points to OpenSSL with low entropy RNG being the culprit: https://freedom-to-tinker.com/blog/nadiah/new-research-theres-no-need-panic-over-factorable-keys-just-mind-your-ps-and-qs https://freedom-to-tinker.com/blog/nadiah/new-research-there...