3
$\begingroup$

I'm looking to do some research into how RSA is used in the wild. I've read through a few papers and it seems other researchers have had no trouble collecting millions of keys to perform analysis on.

I've done some preliminary research but can't seem to find any one site from which to download other people's public keys.

I assume that given the nature of public keys that it would not be a privacy risk to have this sort of database available to the public.

$\endgroup$
2
  • 5
    $\begingroup$ You probably could extract a bunch from the public SSL Observatory data dump. $\endgroup$ Mar 10, 2014 at 14:37
  • 1
    $\begingroup$ Query the top sites from the Alexa rankings and read off the SSL transcript? $\endgroup$ Mar 26, 2014 at 13:20

2 Answers 2

5
$\begingroup$

If RSA keys in PGP format are fine, you can download them from any keyserver.

Many keyservers, at least MIT, have a robots.txt that disallows automated downloads, so be sure to check that before attempting to bulk download anything.

If you need a large collection, you could download a keyserver dump and filter out what you need.

$\endgroup$
0
$\begingroup$

There is a 900,000 domain-key database at registry.prove.email, that no one to my knowledge has run batch-gcd on yet. There may be some reused keys between websites however, so total unique keys may be lower.

$\endgroup$

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.