EMudhra certificates are compromised. Here's what you need to know

5 pointsposted 10 hours ago
by nomaxx117

1 Comments

miohtama

10 hours ago

The private key was a single-byte random number:

https://x.com/astuyve/status/2112613595569692856

A bit less than a single byte, in fact.

eMudhra is India’s largest Certifying Authority, employs about 600-850 staff and generates roughly $70M in annual revenue. Its main lines are enterprise identity and cybersecurity platforms, digital signature and trust services, and related consulting.