Covered by 3 outlets — first reported by Cisco Talos, Oct 21, 20:43 UTC
Compromised eMudhra intermediate certificates
MentionsCisco
In brief
Cisco Talos is aware of eight compromised intermediate certificates belonging to the intermediate certificate authority, eMudhra . Rather than possessing the mandatory 384 bits of pseudo-random security, several private keys evaluated single-digit and double-digit integers.
From Cisco Talos's coverage.
Continue reading
3 outlets, in the order they reported it.
Cisco TalosFirst report
Compromised eMudhra intermediate certificates
Cisco Talos is aware of eight compromised intermediate certificates belonging to the intermediate certificate authority, eMudhra .
Palo Alto Unit 42
EMudhra Intermediate CA Certificates Compromised
Eight compromised eMudhra intermediate CA private keys risk unauthorized TLS signing and MitM interception. Read our analysis and containment guide.
Schneier on Security
Compromised TLS Certificates
The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys : The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident.
Explained
The technology and terms in this story. Learn more