I have released a new version of badkeys that can detect xz backdoor keys https://github.com/badkeys/badkeys/releases/tag/v0.0.7 badkeys is an opensource tool I created to detect known-vulnerable cryptographic public keys. this new check is a bit unusual compared to the other things the tool does, and I was unsure whether to implement it, but well, here it is. 🧵
