Google and Apple Block eMudhra Certificates After Flaw Discovered
· Technology · India Today, MacRumors
Google, Apple, and Mozilla rushed to block eight intermediate digital certificates issued by Indian certificate authority eMudhra after discovering critically weak security keys. A security researcher named Wayne alerted tech companies on October 17 after setting up a demonstration website to prove the keys could be used to forge trusted certificates. While standard private keys contain about 384 bits of randomness, the compromised eMudhra keys measured between just 3 and 8 bits. Cryptography experts warned that patching the fallout across embedded Linux machines, smart home IoT devices, and background server tools will require a massive cleanup effort. The exact cause of how the weak keys ended up in production remains unconfirmed.
Why it matters
Compromised digital certificates expose internet users to fraudulent websites and credential theft, requiring widespread device patching across global networks.
Read the original report — India Today
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.