Eight eMudhra certificate keys were so weak that one was the number 4

Anyone could calculate the private keys of eight eMudhra intermediate certificates from the certificates themselves. eMudhra is a certificate authority based in India. Anyone holding the keys could issue a certificate for any website that browsers and apps would accept. A researcher credited only as Wayne reported the problem to the browser root programs on […] This story continues at The Next Web

Read it at The Next Web ↗

← Front page