Covered by 2 outlets — first reported by Palo Alto Unit 42, Oct 22, 17:15 UTC
EMudhra Intermediate CA Certificates Compromised
In brief
The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys : The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident.
From Schneier on Security's coverage.
Continue reading
2 outlets, in the order they reported it.
Palo Alto Unit 42First report
EMudhra Intermediate CA Certificates Compromised
Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide.
Schneier on Security
Compromised TLS Certificates
The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys : The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident.
Explained
The technology and terms in this story. Learn more