Compromised TLS Certificates

·Schneier on Security··

The Indian CA eMudhra Limited has eight TLS certificates with laughably weak private keys: The compromised eMudhra keys were defective at a level that’s challenging the imagination of many of the engineers studying the incident. A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonish...

Read full article →

Related Articles

Google Chrome silently installs a 4 GB AI model on your device without consent
john-doe · Hacker News · 5mo ago
OpenSSL 4.1.0
petecooper · Hacker News · 46m ago
DNSSEC disruption affecting .de domains – Resolved
warpspin · Hacker News · 5mo ago
Security through obscurity is not bad
mobeigi · Hacker News · 5mo ago
US healthcare marketplaces shared citizenship and race data with ad tech giants
ZeidJ · Hacker News · 5mo ago