Okay, now that the cat's out of the bag and we know D={4, 56, 66, 115, 155, 156, 230, 237} for the eMudhra intermediates, what's your pet theory on how this happened?
Obviously this wasn't generated on a 'real' HSM. But if someone was just trying to have the key material, why not pick one with high entropy?
This leaves the obvious option of incompetence, but then again you'd have to be really incompetent to not just use openssl and roll your own keygen?
So what was it? Sabotage by an insider?
1
1