[nneonneo]

Except that Weak DH only needs one prime - not two. It sounds like the author conflated RSA with DH somehow. It's very rare for real in-the-wild RSA keys to share factors (barring stupid errors like Debian's randomization fail).

[gdavisson]

Not as rare as it should be (see https://cryptosense.com/blog/more-weak-rsa-keys-in-network-d...) -- but there are much easier fixes than QKD.