Who claimed there is cracking software in the black market? I don't find it hard to believe, of course.
The Estonian government is legally bound to applying such countermeasures as soon as there is reasonable doubt about the security of the system. It's pretty important that such things are encoded in law and are not up to whim.
Comments
Official announcement: https://www.valitsus.ee/en/news/estonia-will-block-certifica...
It was claimed that software for cracking the private keys has entered the black market, so they had to block the sertificates earlier than expected.
Who claimed there is cracking software in the black market? I don't find it hard to believe, of course.
The Estonian government is legally bound to applying such countermeasures as soon as there is reasonable doubt about the security of the system. It's pretty important that such things are encoded in law and are not up to whim.
Full paper is out: https://crocs.fi.muni.cz/_media/public/papers/nemec_roca_ccs...
Anyone with good programming skill can make the exploit in matter of hours => it surely is somewhere on black market.