House of Keys

Certificates including the matching private key and various private keys found in the firmware of embedded systems. Most certificates are used as HTTPS server certificates. Some private keys are used as SSH host keys. Other uses of these cryptographic keys were not analyzed yet. The names of products that contained the certificates/keys are included as well.

Further information:

• http://blog.sec-consult.com/2015/11/house-of-keys-industry-wide-https.html
• http://blog.sec-consult.com/2016/09/house-of-keys-9-months-later-40-worse.html