Whatever crossed my mindby Ian Qvist

// tools

KeyVuln

Find weaknesses in public certificates and keys.

Files and pasted text stay on your device.

Examples

Public examples cover key structure, certificate signatures and cross-key correlations. Blocklist checking and private-key recovery are optional.

Files

    16 inputs · 1 MiB each · 4 MiB total

    PEM / DER files, public JWK/JWKS and OpenSSH keys

    Optional checks

    The scanner loads when you start a scan.
    What this tool checks

    Checks and attacks

    • RSA key size, exponent and modulus checks, ROCA fingerprints, and known weak-key patterns.
    • Weak or invalid EC, Edwards/Montgomery, DSA and Diffie-Hellman public keys and parameters.
    • Certificate signature verification against supplied issuers and weak signature algorithms.
    • Shared RSA prime factors across inputs.
    • Optional BadKeys compromised-key blocklist matching.
    • Optional bounded RSA recovery: trial division, Fermat, Wiener, Pollard rho, Pollard p-1, Hart, Lehman and SQUFOF.
    • Optional EC private-scalar recovery for scalars up to 256.

    Input formats

    • X.509 certificates in PEM or DER, including PEM certificate bundles.
    • Public keys in PEM or DER: SubjectPublicKeyInfo and RSA PKCS #1.
    • Public JWK/JWKS documents for RSA, EC and OKP keys.
    • OpenSSH public keys.