Official announcement: https://www.valitsus.ee/en/news/estonia-will-block-certifica...
It was claimed that software for cracking the private keys has entered the black market, so they had to block the sertificates earlier than expected.
It was claimed that software for cracking the private keys has entered the black market, so they had to block the sertificates earlier than expected.
The Estonian government is legally bound to applying such countermeasures as soon as there is reasonable doubt about the security of the system. It's pretty important that such things are encoded in law and are not up to whim.
Anyone with good programming skill can make the exploit in matter of hours => it surely is somewhere on black market.