A recoverable key is a cryptographic key that can be reconstructed by someone who was not meant to possess it. This can happen when a key is generated with weak randomness, predictable inputs, or a flawed generation process. It is different from a key stolen from storage: the weakness may allow reconstruction without direct access to the original secret.
In cyber security, recoverability can undermine any system that relies on the key’s secrecy. For a certificate authority, an attacker who reconstructs a private signing key may be able to issue certificates that appear valid to software trusting that authority. Defenders investigate key-generation methods, identify certificates and systems that depend on affected keys, and apply distrust or replacement updates. A finding that a key is recoverable indicates serious risk, but does not by itself prove that anyone reconstructed or misused it.