eMudhra blames buggy Python script for issuing insecure single-byte private key certificates
Indian certification authority eMudhra disclosed that a faulty custom Python script caused the generation of severely truncated and weak ECDSA P-384 private keys. The script truncated the intended 48-byte private key data to a single byte, resulting in insecure keys easily compromised from public information. This critical cryptographic weakness allowed attackers to forge certificates and impersonate servers, leading browser vendors such as Mozilla to distrust eMudhra's certificates. The underlying cause was supply chain constraints that forced eMudhra to use two different hardware security modules (HSMs) and a key handling script to transfer keys between them, which introduced the bug. eMudhra has ceased issuing SSL/TLS certificates and plans operational improvements following an independent review to bolster PKI security.
Linha do tempo
-
eMudhra blames buggy Python script for issuing insecure single-byte private key certificates
ler a análise desta fonte ocultar
Indian certification authority eMudhra disclosed that a faulty custom Python script caused the generation of severely truncated and weak ECDSA P-384 private keys. The script truncated the intended 48-byte private key data to a single byte, resulting in insecure keys easily compromised from public information. This critical cryptographic weakness allowed attackers to forge certificates and impersonate servers, leading browser vendors such as Mozilla to distrust eMudhra's certificates. The underlying cause was supply chain constraints that forced eMudhra to use two different hardware security modules (HSMs) and a key handling script to transfer keys between them, which introduced the bug. eMudhra has ceased issuing SSL/TLS certificates and plans operational improvements following an independent review to bolster PKI security.