
Govt Forms Special Team to Investigate eMudhra Digital Certificate Leak
What Happened?
The Ministry of Electronics and Information Technology has established a team to investigate the leak of private keys linked to eMudhra's web security certificates. The incident has raised serious concerns about digital security.
Key points
- The leak involves private keys for web security certificates issued by eMudhra.
- CERT-In issued an advisory stating the keys were generated with insufficient cryptographic randomness.
- Compromised keys could allow attackers to issue fraudulent certificates.
- Mozilla reported the compromise of private keys associated with eight eMudhra certificates.
- eMudhra has issued over 60 million digital certificates since its founding in 2008.
- The company is conducting a thorough investigation into the incident.
Key insights
- The incident highlights vulnerabilities in digital certificate generation processes.
- If not addressed, similar incidents could undermine user trust in digital security.
- The outcome of the investigation may lead to stricter regulations for certificate authorities.
Why it matters
The investigation could impact the trustworthiness of digital certificates used across the web.
Tags
Entities
Source
Business Standard



