eMudhra intermediate CA keys can be brute-forced, Cisco says
A researcher showed eight intermediate private keys from an April 2025 ceremony can be recovered in seconds.
Stories per day · 30 days
1 RSS
6 stories, newest first · one card per story
Stories tagged #private-keys
eMudhra exits global SSL/TLS issuance after weak CA private keys
Eight intermediate CA keys were tiny integers, including 4; the firm says none issued end-entity certificates.
1
eMudhra ends certificate business after weak private keys cracked
Eight intermediate keys were integers below 256, one of them 4; major browsers blocked the certificates within days.
2
eMudhra says ceremony flaw published weak certificate keys
One signing key was the number 4, letting attackers forge certificates and impersonate sites.
1
Weak eMudhra keys expose eight trusted intermediate certificates
All eight P-384 private keys were integers below 256 and could be recovered from public certificate data.
6
Hundreds of Leaked GitHub App Keys Still Authenticate
GitGuardian found 474 leaked GitHub App private keys still authenticate, some with organization admin rights.
2