“When you're generating a private key, you should be choosing a random 384-bit number, so roughly 10 to the 115th possibilities. It would take until the end of the universe to guess it. But what had happened was, instead of picking a random number between zero and 10 to the 115th, they picked a random number between zero and 384. They didn't raise two to the power. And that gave them the number four.”

Yeah, I'll talk about it for a second. So, and again, there's a little bit of back information here. When you use the web and you see that little lock in the browser, that's because your web browser trusts a certain set of certificate authorities. A certificate authority is a company that will issue certificates, but they have the secret keys. They are the only ones that can issue keys from their certificate authority. And the entire internet is based on this trust. Operating system has those certificate authority public keys that can be used to verify their private key, like installed in the operating system. It's in Linux, it's in macOS, it's on Android, it's iOS, it's everywhere. And it's literally just a set of certificates that say we trust these people that work at these companies. And so one of those certificate authorities was eMudra. They were based in India. And they generated a private key that was the number four. And someone figured this out. And what that means is, like, if you know what the private key is, that means you can sign certificates as that company. And so because the eMudra was trusted in every single web browser and every single operating system for a…