Security Key Leak at eMudhra Prompts Global Browser Scramble
· Technology · The Hindu, Indian Express
Eight private keys used to issue web security certificates by Bengaluru-headquartered eMudhra Ltd. have been leaked. Major government portals in India, including the income tax filing portal and Aadhaar issuer UIDAI, rely on eMudhra technology. Internet browser and operating system developers worldwide scrambled to revoke and untrust the affected intermediate certificates. The flaw stemmed from certificates using weak numerical keys between 1 and 256 rather than standard 384-bit private keys, making them trivial to exploit. eMudhra revoked the affected certificates and initiated incident response procedures.
Why it matters
The exposure of intermediate certificate keys threatens web encryption integrity for critical government portals and global users alike.
Read the original report — The Hindu
Join us on Telegram
Breaking news the moment it lands. At 10,000 members we ship the Android app.