Investigating認証局・電子署名

eMudhra

DetectedFirst reportScopingRecoveryPrevention
Scale
中間CAの秘密鍵8件が極端に弱い値
Data involved
中間CAの秘密鍵(公開証明書から復元可能)
Cause
鍵生成スクリプトの誤りと主張
Company response
公開CA事業からの撤退を発表
Investigation
鍵生成スクリプトは未公開、監査人の関与を検証中

Timeline

  1. AnalysisScopingOfficialCloudflare Blog

    4 real? Tracking exploitation and patching of eMudhra’s weak keys

    Follow-up on exploitation evidence and patching progress for eMudhra's weak CA keys

News reports are shown by headline and link only. Figures reflect what was reported at the time.

Related stories