/
← Voltar ao feed
high

eMudhra revokes eight CA intermediates with trivially recoverable P-384 keys; Mozilla, Google and Apple block them

1 fonte(s) · 1 atualização(ões) · publicado 20/10/2026 21:46 · coletado há 2 horas

Certificate authority eMudhra revoked eight intermediate certificates after a researcher known as Wayne found on October 17 that their P-384 private keys were so weak that anyone could recover them almost instantly. The keys, generated in April 2025, had values below 256, so an attacker could recover them by testing 256 candidates. This would let an attacker forge trusted certificates for legitimate websites and intercept encrypted traffic. eMudhra says most of the intermediates were never used in production and it found no evidence of issuance to end users, and there is no evidence of abuse. Mozilla, Google and Apple have blocked the certificates, but software with its own certificate stores or no revocation checking may still trust them.

Technical Details

  • All eight certificates used P-384 private keys generated in April 2025 with values smaller than 256.
  • Researcher Flüpke published one compromised key on GitHub. The key for "EM OV TLS CA - G3C" had a value of 4. BleepingComputer verified that it matches one of the revoked certificates.
  • eMudhra blamed an error in a certificate generation script. The error produced a second set of weaker keys, which were mistakenly selected for signing because their labels resembled those of the properly generated keys.
  • Some of the certificates were submitted to Sectigo for cross-signing.
  • Attackers could have recovered and abused the keys since April 2025, though no abuse has been observed.
  • Mozilla blocked the certificates via OneCRL on October 17, and Chrome blocked the six TLS-capable intermediates the same day. Apple added protections on October 19.
  • Mozilla released Firefox 158.0.1 and ESR updates on October 20. The Go team released 1.27.3 and 1.26.10 for CVE-2026-111943.
  • macOS's built-in /usr/bin/curl may continue to trust the certificates because its certificate bundle does not check revocation.

Remediation

  • Install available updates for browsers, Go and other software that bundles its own certificate stores.
  • Check systems with the test endpoints and mitigation instructions in the advisory published by Mozilla engineer Dennis Jackson.
  • Review software that does not check revocation, including macOS /usr/bin/curl, and apply mitigations.
  • eMudhra revoked the eight certificates and stopped issuing new certificates under its G3 root.

Linha do tempo

  1. bleepingcomputer.com ↗ · pub. 20/10/2026 21:46 · coletado 20/10 22:00 primeiro registro

    eMudhra revokes eight CA intermediates with trivially recoverable P-384 keys; Mozilla, Google and Apple block them

    ler a análise desta fonte

    Certificate authority eMudhra revoked eight intermediate certificates after a researcher known as Wayne found on October 17 that their P-384 private keys were so weak that anyone could recover them almost instantly. The keys, generated in April 2025, had values below 256, so an attacker could recover them by testing 256 candidates. This would let an attacker forge trusted certificates for legitimate websites and intercept encrypted traffic. eMudhra says most of the intermediates were never used in production and it found no evidence of issuance to end users, and there is no evidence of abuse. Mozilla, Google and Apple have blocked the certificates, but software with its own certificate stores or no revocation checking may still trust them.

    Technical Details

    • All eight certificates used P-384 private keys generated in April 2025 with values smaller than 256.
    • Researcher Flüpke published one compromised key on GitHub. The key for "EM OV TLS CA - G3C" had a value of 4. BleepingComputer verified that it matches one of the revoked certificates.
    • eMudhra blamed an error in a certificate generation script. The error produced a second set of weaker keys, which were mistakenly selected for signing because their labels resembled those of the properly generated keys.
    • Some of the certificates were submitted to Sectigo for cross-signing.
    • Attackers could have recovered and abused the keys since April 2025, though no abuse has been observed.
    • Mozilla blocked the certificates via OneCRL on October 17, and Chrome blocked the six TLS-capable intermediates the same day. Apple added protections on October 19.
    • Mozilla released Firefox 158.0.1 and ESR updates on October 20. The Go team released 1.27.3 and 1.26.10 for CVE-2026-111943.
    • macOS's built-in /usr/bin/curl may continue to trust the certificates because its certificate bundle does not check revocation.

    Remediation

    • Install available updates for browsers, Go and other software that bundles its own certificate stores.
    • Check systems with the test endpoints and mitigation instructions in the advisory published by Mozilla engineer Dennis Jackson.
    • Review software that does not check revocation, including macOS /usr/bin/curl, and apply mitigations.
    • eMudhra revoked the eight certificates and stopped issuing new certificates under its G3 root.