A crafted X.509 certificate chain with duplicate self-signed certificates can force Python's cryptography library into exponential path exploration. The validator spends seconds rejecting a single chain because each duplicate is treated as a fresh candidate rather than being deduplicated against prior paths.
Random Memories
X.509