/
attack_type:certificate_authority_compromise × victim_sectors:technology × limpar

Resultados

2 casos · pág. 1/1

theregister.com · high

eMudhra attributes weak CA private keys to a flawed key generation ceremony and points to its audits

Indian certification authority eMudhra has publicly responded to the disclosure that private keys behind some of its root and issuing CAs were trivially weak. One key was reportedly the number "4" and others were short, easily guessed numbers. The company says a flaw in a Key Generation Ceremony (KGC) held on April 30, 2025 produced a sec…

technology telecommunications
safedep.io · · 8 fontes · 9 atualizações critical

eMudhra: eight intermediate CA keys trivially recoverable (values below 256); browsers, Go, Apple, Microsoft block them; non-browser clients remain exposed

Eight intermediate CA certificates of the Indian certificate authority eMudhra (emSign brand), generated on 30 April 2025, were found to have P-384 private keys so weak (integers below 256) that anyone can recover them from the public certificates and forge browser-trusted certificates for any domain. A researcher credited as Wayne report…

CVE-2026-111943 technology certificate authorities