HTTPS Keys in the Mediterranean

摘要

Internet banking, online shopping, and many other internet services use Hypertext Transfer Protocol Secure (HTTPS) with digital certificates in a public key infrastructure (PKI) to authenticate and guarantee security and privacy. This work presents an analysis of the cryptographic asymmetric algorithms used in the digital certificates. Indeed, we found only the RSA and ECC-based algorithms. With a large database populated for about 5 years, we were able to analyze asymmetric algorithms. For certificates using ECC, we found only curves recommended by NIST and SECG. For the certificates that use RSA, all modulus of the public key passed unbroken by the Fermat's factorization method with 100 steps. However, we discovered 71 private keys of 1 024-bit size.