eMudhra issued TLS certificates with private keys of 3 to 8 bits
Eight P-384 keys held only a handful of bits of entropy, so a network attacker could impersonate the certificate holder.
72
Eight P-384 keys held only a handful of bits of entropy, so a network attacker could impersonate the certificate holder.
Eight intermediates used 3- to 8-bit private keys that could be cracked in milliseconds to mint trusted certificates.
Eight eMudhra intermediate CA private keys generated with insufficient randomness were compromised, enabling private key derivation and unauthorized TLS certificate signing.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 2.2K readers · 2.7K views · 397 reads · all time 108K views