Interesting research on a new class of weak RSA keys: keys with lots of zeros. It turns out that these keys are out in the wild. //

The article doesn’t speculate, but I will. This could be a deliberately designed backdoor, of the sort I wrote about back in 2013. I could imagine some government agency figuring out how to break this class of RSA keys, and then convincing different providers to hand them out to users.