
eMudhra Apologizes for Weak Crypto Keys, Announces Expert Review
What Happened?
eMudhra has publicly apologized for using weak security keys for digital certificates, acknowledging a scripting error that compromised security. The company is reviewing its practices.
Key points
- eMudhra admitted to using weak keys for issuing digital certificates.
- The company stated, 'The flaw was ours,' acknowledging the error.
- Eight weak keys were generated instead of the required 384-bit keys.
- The weak keys were easy to guess and crack, with values like 4, 56, and 66.
- eMudhra is conducting an expert review to address security concerns.
Key insights
- The incident could lead to increased scrutiny of digital certificate practices.
- Customers may seek alternative providers due to security concerns.
- The review process may result in improved security protocols for eMudhra.
Why it matters
This incident raises concerns about the security of digital certificates used across the internet.
Entities
Source
India Today
