Yet there are countries running 3072-bit RSA on Infineon chips, because their 3K keys are least broken. Discovery also entailed country-wide certificate revocation, which IIRC happened days if not weeks after the flaws were public, while the law states a digital signature has the same bearing as a physical one.
