eMudhra Intermediate CA Certificates Compromised
Comments
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Ranked by a public rubric, not by votes: what a comment adds counts, not who wrote it. How comments are ranked · Comment rules
Summary
Eight intermediate certificate authority private keys belonging to Indian CA eMudhra were compromised after weak randomness during key generation let attackers potentially derive them from public certificates, enabling forged TLS certificates and man-in-the-middle attacks.